MD AZMOL HAQUE RONY

ICT & Cybersecurity Specialist · Data Management · Humanitarian Operations

A disciplined security practitioner (Google VRP–credited) who moved into security from a demanding healthcare and humanitarian background. I identify, analyze, and report vulnerabilities with calibrated, defensible severity — reinforced by years of high-stakes crisis and confidentiality management (MSF), for a blend of technical defense, precise incident response, and unwavering integrity.

azmolhaque95@gmail.com +8801888-642134
View Quantified Impact →

Quantified Impact: Discovery & Triage

Security Practitioner Experience

  • Google VRP (credited): Reported an exposed IAM front-end on a Google-owned domain — remediated in 9 days. Rated accurately; it resolved to low real-world impact and was correctly credit-only.
  • Incident Triage: Conducted detailed Root Cause Analysis (RCA) and produced high-fidelity, triage-ready reports for vendor engineering teams, significantly accelerating patch deployment.
  • Scope Proficiency: Proven hands-on experience in API Misconfiguration, Cross-Site Scripting (XSS), and complex Business Logic Flaws.

PoC: Synology Maps API Leak

Finding: Unrestricted Google Maps/Places API key in client-side code — usable from any origin, so potential for quota/billing abuse. An exposed-credential / missing-restriction issue (Low); fix is key hardening. Recalibrated from an earlier over-stated write-up.

View Live PoC

PoC: Wing.com Geocoding API Leak

Finding: Unrestricted Google Maps API key confirmed usable from an unrelated origin (no referrer restriction) — potential for quota/billing abuse (Low–Medium). No user data or infrastructure access.

View Live PoC

Core Technical Stack

SOC & Analysis

SIEM Tools (Conceptual) Detection & Response Intrusion Detection (IDS)

Vuln Assessment

Burp Suite (Testing) Nmap / Port Scanning Wireshark (Analysis) Cloud Security (GCP/AWS)

Automation & OS

Python (Security Scripting) SQL (Data Querying) Linux / Bash Scripting

Frameworks & Policy

NIST CSF Security Awareness CIA Triad Principles

The Crisis Management Advantage

My experience as a Security Advisor and Humanitarian Professional (MSF) provides highly valuable, non-technical capabilities that define operational resilience in a security context.

Pressure & Decision Making

Managed high-stress situations in Emergency Rooms and ICUs. Translates directly to rapid, calm assessment, disciplined decision-making, and accurate execution of containment protocols.

Confidentiality & Compliance

Responsible for sensitive patient health information (PHI) and operational intelligence. Guaranteed strict adherence to policy, understanding data integrity required for compliance.

Cross-Functional Translation

As an MSF Security Advisor, I translated complex protocols into actionable communication for non-technical teams, ensuring high accountability and policy acceptance.

Verifiable Certifications

Google Cybersecurity Professional

Coursera | Jan 2025

8-course mastery of Python Automation, Detection & Response, Linux, and SIEM/IDS fundamentals.

Verify Credentials

Advent of Cyber 2024

TryHackMe | Dec 2024

Completed 24 practical, hands-on challenges in forensics, web exploitation, and defensive strategies.

View Certificate

Cybersecurity Job Simulation

Mastercard (Forage) | May 2024

Practical experience in phishing defense design and interpreting security awareness results.

View Certificate