Hire the Best Auditors
in Qatar

Information Security | Penetration Testing | API Security | Backend Security Engineer I help businesses identify and remediate security vulnerabilities across web applications, APIs, backend systems, and cloud environments before they can be exploited. What differentiates me from many penetration testers is my background as a Backend Security Engineer and Developer. I don't just find vulnerabilities. I understand why they exist, how they were introduced into the codebase, and how to fix them with minimal impact on your application. Having built production backend systems using Node.js, Express, FastAPI, PostgreSQL, MongoDB, Docker, and AWS, I specialize in uncovering business logic flaws, authorization weaknesses, insecure API implementations, and database security issues that automated scanners frequently overlook. Certifications & Achievements: Certified in Cyber Security (ISC)² Certified Red Team Operations Management (CRTOM) ISO/IEC 27001:2022 Information Security Associate ISO/IEC 27001:2022 Lead Auditor API Security Fundamentals – APIsec University Mutually Agreed Norms for Routing Security (IS) Ranked Top 10 in multiple national Capture The Flag (CTF) competitions 🔍 Security Services: Web Application Penetration Testing OWASP Top 10 assessments Business Logic Testing API Security Testing: REST API Security Assessments JWT Authentication & Authorization Testing BOLA / IDOR Mass Assignment Rate Limiting Validation Sensitive Data Exposure API Misconfiguration Reviews Backend Security Reviews: Secure Authentication & Authorization Access Control Validation Input Validation Database Security Secure API Architecture Source Code Security Review Network & Infrastructure Security: Service Enumeration Firewall & WAF Assessment Linux Security Reviews Network Traffic Analysis Infrastructure Misconfiguration Assessment 🛠 Tools & Technologies Security Burp Suite • Nmap • SQLMap • Wireshark • Metasploit • Hydra • ffuf • Gobuster • Nuclei Backend Development Node.js • Express • FastAPI • JavaScript • Python • PostgreSQL • MongoDB • REST APIs • JWT Platforms Linux • Docker • AWS 📦 What You'll Receive ✅ Comprehensive executive summary suitable for both technical and non-technical stakeholders ✅ Detailed technical report with clear reproduction steps ✅ Risk-based vulnerability assessment with actionable remediation guidance ✅ Developer-focused recommendations and secure coding best practices ✅ Professional communication, transparent updates, and timely delivery Whether you're launching a new product, securing an existing application, validating an API, or reviewing backend code before deployment, I deliver practical, actionable security assessments designed to reduce real-world risk, not just generate scanner output. Let's secure your application before someone else tests it for you.

I am a results-driven finance professional with over 17 years of hands-on experience in accounting, internal audit, costing, financial analysis, budgeting, and treasury operations. I have worked with large organizations and government entities, handling complex financial operations, audits, and high-value projects. I help clients clean up books, analyze numbers, control costs, and make confident financial decisions — with accuracy, clarity, and full compliance. 🔹 What I Can Help You With ✔ Bookkeeping & Accounting (AP, AR, GL) ✔ Financial Statements (P&L, Balance Sheet, Cash Flow) ✔ Costing & Project Financial Analysis ✔ Budgeting, Forecasting & Variance Analysis ✔ Internal Audit & Control Review ✔ Fixed Assets & Asset Register Management ✔ Treasury, Bank Reconciliation & Cash Flow Tracking ✔ Audit Coordination & Documentation (Audit-ready books) ✔ Risk Identification & Process Improvement

✅ Penetration Tester with 7+ years of experience ✅ OSCP | CRTP | CEH | CREST CRT ✅ 63+ projects delivered ✅ Cybersecurity Expert - Worked with Fortune 500 companies ✅ Recognized in the Hall of Fame for platforms such as Pinterest, Walmart, Optimizely, etc. Hi! I'm Arslan, A Cyber Security Expert, Penetration Tester with 7+ years of experience. With more than 110 reviews online. I am uniquely qualified to secure your digital assets effectively. My track record includes collaborating with 500 Fortune companies and fortifying their digital assets against the ever-evolving threat landscape. During these 7 years, I have identified and addressed vulnerabilities in digital assets for top companies like Pinterest, Walmart, and Optimizely. My expertise spans Authentication Bypass, SQL Injection, Sensitive Information Disclosure, Cross-Site Scripting, and CSRF. I have conducted Internal/External network assessments, web app and mobile app security audits, and active directory penetration tests for various organizations, contributing to strengthened cybersecurity measures. Reviews: "Arslan is an excellent penetration tester. He's hard-working, diligent, and fast. We're looking forward to hiring him for a future contract. If you have the opportunity to hire Arslan, I suggest you take it!" "Wonderful work. A really in-depth vulnerability and penetration test. I would gladly recommend him to other businesses." 🔒 Your Digital Fort is Only as Strong as its Guardian. Let's Secure the Future Together! 🔒

With over 14 years of cross-industry experience, I’ve built my career on a simple belief: a safe, sustainable, and efficient workplace isn’t a target to reach, it’s a culture to build. My journey has spanned from the factory floors of pharmaceutical leaders like Sanofi and Getz Pharma to the boardrooms of Haleon and GSK, where I served as Head of EHS. This blend of hands-on and strategic leadership gives me a unique, 360-degree understanding of what it takes to embed excellence at every level of an organization. As a NEBOSH International Diploma professional, certified Lead Auditor, and Level 3 Trainer, I bring deep technical knowledge but my true passion is in practical application. I specialize in digitally weaving complex EHS and ESG principles into everyday business processes, creating systems that are not just compliant, but intelligent, user-friendly, and performance-driven. My focus has always been protecting people, preserving the environment, and strengthening business resilience through smart, sustainable innovation. Now, through my venture EHS and ESG Consultants, I partner with forward-thinking organizations ready to move beyond box-ticking. My mission is to help you build a robust, future-ready foundation for EHS and ESG excellence, transforming requirements into results and risks into long-term value.

About Engy, I am a mechanical engineer, and I am registered worldwide as an ISO management system Principal Auditor, IRCA Cert No. 01200837, and by the American Board PECB. I am also an international Business consultant and hold a Professional Doctorate in Business Administration. I am a co-founder of Noon International Academy, a School based in Qatar, and I have been working as a Principal since 2017. I supported many companies in different fields to start their business journey and develop their business plan to succeed. I supported many firms in Egypt and Qatar in complying with the requirements of different International Standards, e.g., ISO, BS, API, education, etc. I prepared hundreds of successful business plans, feasibility studies, and financial analysis & forecasting. I created and conducted many different training courses to help organizations of various levels improve their performance. I provide custom-based training courses. I am a professional with extensive experience preparing manuals, policies, procedures, and instructions. I am a perfect leader in team building, planning, and follow-up. Having worked in the quality assurance field for years, I have developed a deep understanding of total quality best practices and a keen eye for details. I am highly skilled in conducting thorough product/service inspections, identifying gaps & areas of improvement, and implementing corrective actions to enhance overall quality. Additionally, my expertise