Shaik Nawaz Ahmed

OSCP-certified offensive security professional with hands-on experience in web, network, and Active Directory testing across enterprise and financial environments.

I validate real breach paths, identify high-risk weaknesses, and deliver compliance-aligned reporting that drives measurable risk reduction.

Regulatory Alignment

Offensive Security & VAPT

• Enterprise web, network, and Active Directory penetration testing
• End-to-end attack lifecycle and privilege escalation validation

Active Directory Attacks

• Kerberoasting, AS-REP roasting, delegation abuse
• Credential abuse, lateral movement, and domain compromise pathing

Web & Network Testing

• Authentication, authorization, injection, and configuration risk testing
• Privilege escalation and business-impact validation

Reporting & Risk Analysis

• Executive and technical reporting with impact and remediation priority
• Clear remediation roadmaps for technical and business stakeholders

OSCP

Offensive Security Certified Professional (OSCP) | Dec 2025

OSEP (In Progress)

Advanced red-team training in stealth operations, AV/EDR evasion, and advanced AD attack tradecraft.

CEH Practical

EC-Council | Certified July 2025 | Practical penetration testing focus.

Google Cybersecurity Certificate

Completed Oct 2024 | Security operations, SIEM, and incident response foundations.

Engagement Impact

• High and critical findings validated with exploitability evidence
• Attack chains demonstrated from foothold to domain-level impact
• Clear communication for both engineering teams and business stakeholders

Active Directory Attack Simulation

• Built a controlled AD lab mirroring enterprise architecture and trust relationships.
• Executed low-privilege to domain-compromise attack paths with detection checkpoints.
• Mapped detection gaps and produced practical defensive recommendations.

Hands-on Security Research & Simulations

• Completed 50+ enterprise-style labs across web, Linux, Windows, and Active Directory.
• Repeated full attack chains: recon -> access -> escalation -> lateral movement -> domain impact.
• Mapped findings to ISO 27001, SAMA, and NCA ECC control expectations.

TryHackMe

Ranked in the global Top 10% through consistent enterprise-style lab performance.

CTF Ranking

Placed 114/500 teams in a national-level CTF hosted by the Computer Society of India.

Workshops

Delivered a 3-day hands-on workshop on ethical hacking, reconnaissance, and vulnerability assessment.