Security
DDoS Shield
Cybersecurity education platform explaining DDoS attack vectors (volumetric, protocol, application-layer), mitigation strategies, and protection tier configurations.
Next.jsFramer MotionTypeScript
root@sameer:~$
SAMEERAHMED
Security · Compliance · Development
Cybersecurity Engineer and GRC Analyst at Zoffec Infotech Pvt. Ltd. — hands-on in firewall security, SEBI CSCRF compliance, SOC operations, vulnerability assessment, and secure full-stack development.
50+Firewall Rules
10+Clients Secured
100+SOC Agents
9.06CGPA
RULE 01PERMIT ANY /about[ACCEPT]About Me
Security-First.
Always.
I'm a Cybersecurity Engineer and GRC (Governance, Risk & Compliance) professional passionate about building robust defences and secure systems. Currently at Zoffec Infotech Pvt. Ltd. — designing firewall architectures, leading SEBI CSCRF compliance assessments, and operating SOC tooling across enterprise environments.
I also build production-grade full-stack applications, bringing the same security-first mindset from the network edge to the application layer.
- B.E. Information Technology — MHSSCOE, Mumbai (CGPA 9.06/10)
- Cybersecurity Engineer & GRC (Governance, Risk & Compliance) Analyst at Zoffec Infotech
- Hands-on SEBI CSCRF gap assessments, control validation & audit evidence for regulated entities
- SOC Agent Deployment & Alert Triage across 100+ enterprise endpoints
- Firewall policy design: IPsec VPN, WAF, NAT, IPS on Sophos XGS appliances
- Full-Stack developer with 2+ years of freelance experience building production apps
B.E. IT
GRC Analyst
Open to opportunities
RULE 02PERMIT ANY /skills[ACCEPT]Capabilities
My Arsenal
Dual-domain expertise — defensive & offensive security paired with modern full-stack engineering.(58 skills)
Sophos XGS Firewall
IPsec VPN
WAF Rules
NAT / PAT
IDS / IPS
Endpoint Security
Zero Trust
SD-WAN
Kali Linux
Metasploit
Burp Suite
Nmap
Wireshark
SQLmap
Hydra
Nikto
OWASP Top 10
Splunk
Wazuh / OSSEC
Elastic SIEM
Microsoft Sentinel
SOC Agent Deploy
Alert Triage
Threat Hunting
Log Analysis
SEBI CSCRF
Gap Assessments
Control Validation
Audit Evidence
BCP / DR Plans
RTO / RPO Mapping
Risk Identification
Remediation Tracking
TCP / IP
DNS & DHCP
OSI Model
VLANs
React
Next.js
Node.js
TypeScript
MongoDB
Express.js
Tailwind CSS
JavaScript
Socket.io
Framer Motion
Linux
Windows Server
Docker
AWS
Git
Postman
Vercel
Python
Java
HTML5
CSS3
RULE 03PERMIT ANY /experience[ACCEPT]Career
Work Experience
Cybersecurity Engineer & GRC Analyst
Oct 2025 — Present Mumbai, India · On-SiteFull-Time
- Configured and maintained Sophos XGS firewall policies — access rules, NAT, traffic filtering, IPsec VPN tunnels, and WAF rules across multiple enterprise client environments.
- Deployed and managed Sophos Central endpoint & server protection agents across 100+ client systems; monitored agent visibility, reviewed alerts, triaged threats, and reduced false positives.
- Performed vulnerability assessments using Nmap, Wireshark, and Burp Suite to identify exposed services, weak configurations, and missing security controls; documented findings with remediation steps.
- Supported SEBI CSCRF compliance activities — gap assessments, audit evidence collection, control validation, and documentation review; coordinated with technical teams to track remediation closure.
- Assisted internal cybersecurity audits covering access management, endpoint protection, firewall configuration, vulnerability management, and SOC monitoring processes.
- Authored and reviewed CCMP, BCP, and DR documentation aligned with SEBI guidelines; mapped RTO/RPO for critical processes and maintained governance records for audit readiness.
- Investigated firewall, VPN, endpoint, and network connectivity issues; documented security observations and remediation actions to support client reporting and compliance tracking.
- Prepared gap assessment inputs by identifying control deficiencies, documentation gaps, and technical security weaknesses across client systems and processes.
Sophos XGSSEBI CSCRFGRCSOCIPsec VPNWAFVulnerability AssessmentBCP/DRNmapBurp Suite
- Developed and delivered 30+ freelance projects using the MERN stack — scalable, responsive, high-performance web applications tailored to client requirements.
- Built the Alvira Bags eCommerce platform from scratch; applied SEO strategies that achieved #1 Google ranking, 40% improvement in site speed, and 50% increase in sales.
- Designed and deployed the official GeekyTechh website with a modern, cross-browser responsive UI — resulting in 30% higher engagement, 20% lower bounce rate, and improved traffic retention.
ReactNext.jsNode.jsMongoDBMERN StackSEOVercel
RULE 04PERMIT ANY /projects[ACCEPT]Portfolio
Featured Projects
Production-grade applications built with security and performance as first-class requirements.
Security
LotteryVault
Blockchain lottery dApp with Solidity smart contracts featuring reentrancy guards, access controls, and verifiable randomness via Chainlink VRF.
SolidityMetaMaskReactSmart Contracts
CodeNo Demo
GeekyTechh
Freelance services website with secure contact form, performance-optimised image pipeline, strict CSP headers, and HSTS enforcement.
Next.jsTailwind CSSFramer Motion
RULE 05PERMIT ANY /projects/queue[LOG]Planned Builds
Scoped and queued — security-focused builds mapped directly to the GRC/SOC work I do day-to-day.
ThreatMap — Threat Intelligence Dashboard
High impactReal-time OSINT aggregator pulling from AbuseIPDB, Shodan, VirusTotal, and MITRE ATT&CK. Visualises threat actors, IOCs, and TTPs on an interactive map.
Next.jsShodan APIAbuseIPDB
// Showcases OSINT + threat intelligence skills — directly relevant to SOC Analyst roles
SecureVault — Password Manager with E2E Encryption
High impactEnd-to-end encrypted password manager using AES-256-GCM + PBKDF2, zero-knowledge architecture, TOTP 2FA, and breach detection via HaveIBeenPwned API.
ReactNode.jsWebCrypto API
// Demonstrates deep cryptography knowledge and zero-trust design patterns
NetSentry — Network Scanner & Vulnerability Reporter
High impactWeb UI over Nmap + Shodan that scans a target, identifies open ports/services, correlates with CVE database, and generates PDF pentest-style reports.
PythonFastAPINmap
// Combines your pentest + full-stack skills — instant portfolio differentiator for security engineering roles
GRC Compass — Compliance Assessment Tool
High impactWeb app that guides users through SEBI CSCRF / ISO 27001 control checklists, tracks gap status, assigns risk scores, and exports audit-ready Excel reports.
Next.jsPostgreSQLPrisma
// Directly maps to your GRC Analyst role at Zoffec — no one else in the market has this specific project
PhishGuard — Phishing Email Analyzer
Medium impactUpload an .eml file, the app parses headers, checks SPF/DKIM/DMARC alignment, extracts URLs for VirusTotal scanning, and produces an IOC report.
PythonFastAPIVirusTotal API
// Great for SOC/Blue Team portfolio — shows email threat analysis capability
RULE 05PERMIT ANY /education[ACCEPT]Education
Academic Foundation
M.H. Saboo Siddik College of Engineering
B.E. Information Technology
2021 — 2025CGPA: 9.06 / 10
CybersecurityComputer NetworksCloud ComputingData StructuresDBMSOS
St. Xavier's High School
SSC — Maharashtra State Board
2020 — 202184%
MathematicsScienceTechnology
RULE 06PERMIT ANY /contact[ESTABLISHED]Get in Touch
Initiate Contact
Open to cybersecurity roles, GRC consulting, and full-stack development opportunities.
Location
Mumbai, Maharashtra, India
Role
Cybersecurity Engineer & GRC Analyst
Available for new opportunities
$ send_message.sh