Skip to main content
root@sameer:~$

SAMEERAHMED

Security · Compliance · Development

Cybersecurity Engineer and GRC Analyst at Zoffec Infotech Pvt. Ltd. — hands-on in firewall security, SEBI CSCRF compliance, SOC operations, vulnerability assessment, and secure full-stack development.

GitHub LinkedIn Email Resume
50+Firewall Rules
10+Clients Secured
100+SOC Agents
9.06CGPA

About Me

Security-First.
Always.

I'm a Cybersecurity Engineer and GRC (Governance, Risk & Compliance) professional passionate about building robust defences and secure systems. Currently at Zoffec Infotech Pvt. Ltd. — designing firewall architectures, leading SEBI CSCRF compliance assessments, and operating SOC tooling across enterprise environments.

I also build production-grade full-stack applications, bringing the same security-first mindset from the network edge to the application layer.

  • B.E. Information Technology — MHSSCOE, Mumbai (CGPA 9.06/10)
  • Cybersecurity Engineer & GRC (Governance, Risk & Compliance) Analyst at Zoffec Infotech
  • Hands-on SEBI CSCRF gap assessments, control validation & audit evidence for regulated entities
  • SOC Agent Deployment & Alert Triage across 100+ enterprise endpoints
  • Firewall policy design: IPsec VPN, WAF, NAT, IPS on Sophos XGS appliances
  • Full-Stack developer with 2+ years of freelance experience building production apps
GitHub LinkedIn Download CV
Sameer Ahmed Shaikh — Cybersecurity Engineer & GRC Analyst
B.E. IT
GRC Analyst
Open to opportunities

Capabilities

My Arsenal

Dual-domain expertise — defensive & offensive security paired with modern full-stack engineering.(58 skills)

Sophos XGS Firewall
IPsec VPN
WAF Rules
NAT / PAT
IDS / IPS
Endpoint Security
Zero Trust
SD-WAN
Kali Linux
Metasploit
Burp Suite
Nmap
Wireshark
SQLmap
Hydra
Nikto
OWASP Top 10
Splunk
Wazuh / OSSEC
Elastic SIEM
Microsoft Sentinel
SOC Agent Deploy
Alert Triage
Threat Hunting
Log Analysis
SEBI CSCRF
Gap Assessments
Control Validation
Audit Evidence
BCP / DR Plans
RTO / RPO Mapping
Risk Identification
Remediation Tracking
TCP / IP
DNS & DHCP
OSI Model
VLANs
React
Next.js
Node.js
TypeScript
MongoDB
Express.js
Tailwind CSS
JavaScript
Socket.io
Framer Motion
Linux
Windows Server
Docker
AWS
Git
Postman
Vercel
Python
Java
HTML5
CSS3

Career

Work Experience

Cybersecurity Engineer & GRC Analyst

Zoffec Infotech Pvt. Ltd.
Oct 2025 — Present Mumbai, India · On-SiteFull-Time
  • Configured and maintained Sophos XGS firewall policies — access rules, NAT, traffic filtering, IPsec VPN tunnels, and WAF rules across multiple enterprise client environments.
  • Deployed and managed Sophos Central endpoint & server protection agents across 100+ client systems; monitored agent visibility, reviewed alerts, triaged threats, and reduced false positives.
  • Performed vulnerability assessments using Nmap, Wireshark, and Burp Suite to identify exposed services, weak configurations, and missing security controls; documented findings with remediation steps.
  • Supported SEBI CSCRF compliance activities — gap assessments, audit evidence collection, control validation, and documentation review; coordinated with technical teams to track remediation closure.
  • Assisted internal cybersecurity audits covering access management, endpoint protection, firewall configuration, vulnerability management, and SOC monitoring processes.
  • Authored and reviewed CCMP, BCP, and DR documentation aligned with SEBI guidelines; mapped RTO/RPO for critical processes and maintained governance records for audit readiness.
  • Investigated firewall, VPN, endpoint, and network connectivity issues; documented security observations and remediation actions to support client reporting and compliance tracking.
  • Prepared gap assessment inputs by identifying control deficiencies, documentation gaps, and technical security weaknesses across client systems and processes.
Sophos XGSSEBI CSCRFGRCSOCIPsec VPNWAFVulnerability AssessmentBCP/DRNmapBurp Suite

Full-Stack Developer

Geeky Techh
Jan 2023 — Sep 2025 Remote · FreelanceFreelance
  • Developed and delivered 30+ freelance projects using the MERN stack — scalable, responsive, high-performance web applications tailored to client requirements.
  • Built the Alvira Bags eCommerce platform from scratch; applied SEO strategies that achieved #1 Google ranking, 40% improvement in site speed, and 50% increase in sales.
  • Designed and deployed the official GeekyTechh website with a modern, cross-browser responsive UI — resulting in 30% higher engagement, 20% lower bounce rate, and improved traffic retention.
ReactNext.jsNode.jsMongoDBMERN StackSEOVercel

Portfolio

Featured Projects

Production-grade applications built with security and performance as first-class requirements.

DDoS Shield screenshot
Security

DDoS Shield

Cybersecurity education platform explaining DDoS attack vectors (volumetric, protocol, application-layer), mitigation strategies, and protection tier configurations.

Already security-focused. Enhance: add live traffic simulator, Cloudflare/AWS Shield API integration demo, and a CVE lookup widget.

Next.jsFramer MotionTypeScript
Code Live
CodeCollab screenshot

CodeCollab

Real-time collaborative coding platform with JWT auth, encrypted WebSocket channels, CSP headers, and XSS-safe input handling. Integrates OpenAI and GitHub APIs.

Add: JWT refresh-token rotation, rate limiting on code execution, sandboxed code runner (Docker isolate), and audit logs for session events.

ReactNode.jsSocket.ioMongoDBOpenAI
Code Live
LotteryVault screenshot
Security

LotteryVault

Blockchain lottery dApp with Solidity smart contracts featuring reentrancy guards, access controls, and verifiable randomness via Chainlink VRF.

Add: MythX / Slither static analysis report, on-chain event audit trail, formal verification, and bug-bounty documentation in the README.

SolidityMetaMaskReactSmart Contracts
CodeNo Demo
GeekyTechh screenshot

GeekyTechh

Freelance services website with secure contact form, performance-optimised image pipeline, strict CSP headers, and HSTS enforcement.

Add: Vercel WAF rules, rate-limited contact API (already partial), and a publicly visible security.txt file at /.well-known/security.txt.

Next.jsTailwind CSSFramer Motion
Code Live

Education

Academic Foundation

M.H. Saboo Siddik College of Engineering

B.E. Information Technology

2021 — 2025CGPA: 9.06 / 10
CybersecurityComputer NetworksCloud ComputingData StructuresDBMSOS

St. Xavier's High School

SSC — Maharashtra State Board

2020 — 202184%
MathematicsScienceTechnology

Sophos Firewall Certified Engineer

CERTIFIED

Sophos — Official Certification

Certified in Sophos XGS Firewall deployment, policy architecture, IPsec VPN, WAF rules, and advanced threat protection on Sophos Central.

Get in Touch

Initiate Contact

Open to cybersecurity roles, GRC consulting, and full-stack development opportunities.

Location

Mumbai, Maharashtra, India

Role

Cybersecurity Engineer & GRC Analyst

// Profiles

GitHub LinkedIn
Available for new opportunities
$ send_message.sh