Professional Summary
ICT and data-management specialist with 5+ years of professional experience bridging formal information-systems training with frontline humanitarian operations. Former Médecins Sans Frontières (MSF) team member with a deep, practical understanding of the Cox's Bazar emergency context. Google-certified in cybersecurity — and Google VRP–credited for a responsibly disclosed finding — with hands-on competencies in system troubleshooting, incident management, and data extraction using SQL and Python. Proven ability to provide first-level ICT support, maintain digital inventories, and facilitate technical orientation for multicultural teams, with a consistent focus on data integrity and secure infrastructure.
Featured Security Research
Exposed IAM front-end on a Google-owned domain
Default-credential and any-password login on a forgotten admin panel, backed by an unauthenticated API — reachable through Google's edge but never operated by Google. Reported via Google Bug Hunters; remediated in 9 days. I rated it accurately; it resolved to low real-world impact and was correctly credit-only. Write-up covers the discovery method, the "edge-fronted ≠ operated" root cause, and a defender's playbook — in 9 languages.
Professional Experience
- Provide first-level technical support, managing the lifecycle of assigned ICT incidents with systematic troubleshooting for organizational infrastructure.
- Extract and analyze data from databases using SQL and Python to fulfil end-user requests, diagnose technical errors, and execute corrections.
- Maintain internal databases, technical manuals, and procedural documentation to ensure operational continuity and robust data protection.
- Assist in routine system configuration and deployment of security protocols to safeguard sensitive digital assets against unauthorized access.
- Managed Health Information Systems (HIS), achieving 100% accuracy in archiving and retrieval of digital and paper-based procedural data.
- Generated daily and monthly operational reports by extracting critical data from hospital databases to support administrative decisions and resource allocation.
- Delivered structured on-the-job orientation for new users on technical data entry, procedural protocols, and universal health-standard compliance.
- Primary focal point for procedural data collection and electronic morbidity/mortality databases within the high-volume Rohingya refugee response.
- Maintained rigorous medical inventory and logistical documentation, ensuring supply-chain accountability and proper lifecycle storage of equipment.
- Acted as a bilingual technical liaison, providing translation and operational orientation to help international staff integrate into field systems.
- Maintained electronic patient records and health information systems in a high-intensity, zero-error environment.
- Ensured data integrity and strict confidentiality while processing intakes and generating daily operational reports.
Technical & Operational Skills
IT Service Management
First-level user support, incident-lifecycle management, ITIL-aligned troubleshooting.
Data & Analytics
Database extraction (SQL), task automation (Python), diagnostic reporting, log analysis.
Security & Infrastructure
Vulnerability management, phishing simulations, SIEM (Splunk), Nmap, Wireshark, Burp Suite, Linux, NIST CSF.
Operational Management
ICT inventory tracking, routine system configuration, electronic medical records (EMR).
Open-Source Security Tooling
A small, honest recon toolkit for authorized testing:
- subdomain_enum.py — orchestrated subdomain discovery + liveness
- urls_collector.py — URL-surface collection & signal filtering
- sqli.py — SQL-injection screening for authorized testing
Certifications
- Google Cybersecurity Professional Certificate — Coursera · Jan 30, 2025 · Verify
Network Security, Linux, SQL, Python automation, SIEM. - Advent of Cyber 2024 — TryHackMe · Dec 28, 2024 · Certificate
24 practical challenges — troubleshooting & network defense. - Mastercard Cybersecurity Job Simulation — Forage · May 8, 2024 · Certificate
Phishing-defense design and security-awareness interpretation.
Education & Licensure
- Bachelor of Science in Nursing (BSc) — University of Rajshahi, Bangladesh · Graduated 2017
- Registered Professional — Bangladesh Nursing & Midwifery Council · Reg. 6708 (valid until Jan 2028)