$ cat cv.md

Muntazir Mehdi

Offensive Security

Eastern Province, Saudi Arabia

#summary

IT analyst by day, offensive security after hours. CPTS-certified, with Dante and Zephyr completed on HTB Pro Labs. Currently working through CRTP, followed by Windows internals and C/C++, then MalDev Academy, ODPC, and OSCP. Open to offensive security, red team, and detection engineering roles in Saudi Arabia where the work is technical and hands-on.

#experience

IT Analyst at GVS Industrial Company

Jun 2025 – Present

Dammam, Saudi Arabia

Manage Active Directory, patching, endpoint security, and AV/EDR coverage for a 25-user office.
Own the full access lifecycle: provisioning, deprovisioning, group policy hygiene, and password resets.
Handle first-response IT incidents and resolve hardware, software, and network issues without escalation.

Security Analyst at Asia Pacific University

Jan 2024 – Apr 2024

Kuala Lumpur, Malaysia

Performed vulnerability assessments and penetration tests against university lab infrastructure.
Identified exploitable misconfigurations and weak services, then produced risk-rated reports with remediation steps.
Delivered technical writeups for both IT staff and faculty stakeholders.

Cyber Security Internship at Asia Pacific University

Sep 2023 – Jan 2024

Kuala Lumpur, Malaysia

Imaged and hardened lab workstations to a standardised security baseline.
Resolved day-to-day hardware and software tickets for students and staff.
Documented repeatable procedures for the university's internal IT knowledge base.

#certifications

CPTSCertified Penetration Testing Specialist, Hack The BoxApr 2026
CRTPCertified Red Team Professional, Altered Securityin progress
BTL1Blue Team Level 1, Security Blue Team95%, second attempt
eJPTJunior Penetration Tester, INE / eLearnSecurity
ICCAINE Certified Cloud Associate, INE

#labs

Dante/ Hack The Box Pro Labs
My first pro lab. Big and messy. It taught me to keep clean notes because three pivots later you can lose track fast.
Zephyr/ Hack The Box Pro Labs
Pure AD. This is where Kerberoasting, ACL abuse, and cross-forest trusts stopped being theory and started making practical sense.

#what's next

01CRTP, Active Directory attack tradecraft, Altered SecurityIn progress
02Windows Internals + C/C++, Pluralsight and self-studyNext
03MalDev Academy, Malware dev from the ground upPlanned
04ODPC, Offensive Development Practitioner, White Knight LabsPlanned
05OSCP, OffSec, the one everyone asks aboutPlanned

#skills

Offensive: Active Directory attacks, Internal network pentesting, Web app testing, Privilege escalation, Lateral movement, Post-exploitation
Defensive: Log analysis, SIEM workflows, Disk and traffic forensics, Incident response fundamentals
Tooling: Nmap, Burp Suite, BloodHound, NetExec, Impacket, Metasploit, Mimikatz, Splunk, Autopsy, Wireshark
Systems: Windows internals, Active Directory, Linux, Endpoint hardening
Languages: PowerShell, Python, C/C++

#education

BSc (Hons) Cyber Security

Asia Pacific University (APU), Kuala Lumpur, Malaysia

Awarded by De Montfort University, Leicester, United Kingdom

#summary

#experience

IT Analyst at GVS Industrial Company

Jun 2025 – Present

Dammam, Saudi Arabia

Manage Active Directory, patching, endpoint security, and AV/EDR coverage for a 25-user office.
Own the full access lifecycle: provisioning, deprovisioning, group policy hygiene, and password resets.
Handle first-response IT incidents and resolve hardware, software, and network issues without escalation.

Security Analyst at Asia Pacific University

Jan 2024 – Apr 2024

Kuala Lumpur, Malaysia

Performed vulnerability assessments and penetration tests against university lab infrastructure.
Identified exploitable misconfigurations and weak services, then produced risk-rated reports with remediation steps.
Delivered technical writeups for both IT staff and faculty stakeholders.

Cyber Security Internship at Asia Pacific University

Sep 2023 – Jan 2024

Kuala Lumpur, Malaysia

Imaged and hardened lab workstations to a standardised security baseline.
Resolved day-to-day hardware and software tickets for students and staff.
Documented repeatable procedures for the university's internal IT knowledge base.

#labs

Dante/ Hack The Box Pro Labs

My first pro lab. Big and messy. It taught me to keep clean notes because three pivots later you can lose track fast.

Zephyr/ Hack The Box Pro Labs

Pure AD. This is where Kerberoasting, ACL abuse, and cross-forest trusts stopped being theory and started making practical sense.

#what's next

01CRTP, Active Directory attack tradecraft, Altered SecurityIn progress

02Windows Internals + C/C++, Pluralsight and self-studyNext

03MalDev Academy, Malware dev from the ground upPlanned

04ODPC, Offensive Development Practitioner, White Knight LabsPlanned

05OSCP, OffSec, the one everyone asks aboutPlanned

#skills

Offensive

Active Directory attacks, Internal network pentesting, Web app testing, Privilege escalation, Lateral movement, Post-exploitation

Defensive

Log analysis, SIEM workflows, Disk and traffic forensics, Incident response fundamentals

Tooling

Nmap, Burp Suite, BloodHound, NetExec, Impacket, Metasploit, Mimikatz, Splunk, Autopsy, Wireshark

Systems

Windows internals, Active Directory, Linux, Endpoint hardening

Languages

PowerShell, Python, C/C++