Kashif Sohail A. looks like a good fit?
We can organize an interview with Aldin or any of our 25,000 available candidates within 48 hours. How would you like to proceed?
Schedule Interview NowKashif Sohail A. - AWS Developer, Web App Penetration Testing, AWS
My name is Kashif Sohail A. and I have over 13 years years of experience in the tech industry. I specialize in the following technologies: Penetration Testing, GDPR, Cybersecurity Management, Information Security, Certified Information Security Manager, etc.. I hold a degree in , , , , . Some of the notable projects I’ve worked on include: Certified Penetration Testing Report (Certified by LPT EC Council USA), SOC 2 Type I successfully done in 2 weeks, HIPAA Compliance Services, vCISO Services for SOC 2, FedRAMP, ISO 27001, GDPR, and HIPAA, ISO 27001 and SOC2 Policies Implementation, etc.. I am based in Sargodha, Pakistan. I've successfully completed 8 projects while developing at Softaims.
I employ a methodical and structured approach to solution development, prioritizing deep domain understanding before execution. I excel at systems analysis, creating precise technical specifications, and ensuring that the final solution perfectly maps to the complex business logic it is meant to serve.
My tenure at Softaims has reinforced the importance of careful planning and risk mitigation. I am skilled at breaking down massive, ambiguous problems into manageable, iterative development tasks, ensuring consistent progress and predictable delivery schedules.
I strive for clarity and simplicity in both my technical outputs and my communication. I believe that the most powerful solutions are often the simplest ones, and I am committed to finding those elegant answers for our clients.
Main technologies
AWS Developer
13 years
Penetration Testing
2 Years
GDPR
8 Years
Cybersecurity Management
11 Years
Additional skills
- Penetration Testing
- GDPR
- Cybersecurity Management
- Information Security
- Certified Information Security Manager
- Information Security Audit
- SOC 2
- AI Security
- ISO 27001
- Governance, Risk & Compliance Software
- NIST Cybersecurity Framework
- IT Compliance Audit
- Risk Assessment
- Security Testing
- Web App Penetration Testing
- AWS
Direct hire
Potentially possible
Experience Highlights
Certified Penetration Testing Report (Certified by LPT EC Council USA)
Penetration testing of Web, Mobile, APIs and Cloud
SOC 2 Type I successfully done in 2 weeks
Designed and implemented comprehensive SOC 2 and ISO 27001 policies to enable seamless vendor onboarding with JPMorgan. The project involved developing tailored information security frameworks, ensuring compliance with stringent regulatory requirements, and mitigating potential risks. Delivered a robust set of security controls, streamlined documentation, and audit readiness, empowering the client to establish trust and successfully engage with JPMorgan and other enterprise-level clients.
HIPAA Compliance Services
Developed and implemented a robust framework to ensure HIPAA compliance for a healthcare provider. The project included securing patient data, establishing privacy and security policies, and conducting risk assessments. Delivered end-to-end solutions such as encryption protocols, access controls, and employee training to safeguard sensitive health information. Enabled the client to maintain regulatory compliance while enhancing trust and ensuring the confidentiality, integrity, and availability of patient data.
vCISO Services for SOC 2, FedRAMP, ISO 27001, GDPR, and HIPAA
The client delivers a SaaS solution that enables federal agencies and private enterprises to analyze vast volumes of financial data. To address multiple regulatory requirements, a robust multi-compliance framework was designed and organized into a clear, step-by-step implementation roadmap.
ISO 27001 and SOC2 Policies Implementation
Delivered a multi-compliance (SOC 2 and ISO 27001) fully customized information security policy and procedure set (30 documents) to the client within a week!
Education
ISO 27001 Implementer Certified
in
2017-01-01-2017-01-01
ISACA - Certified Information Systems Auditor
in Certified IT Auditor
2019-01-01-2019-01-01
ISACA - Certified Data Privacy Solutions Engineer™ (CDPSE®)
in Certified Privacy Officer
2020-01-01-2020-01-01
ISACA - Certified Information Security Manager (CISM)
in Certified
2019-01-01-2019-01-01
ISACA - Certified in Risk and Information Systems Control® (CRISC®)
in Certified Risk Manager
Languages
- English
Github