SOC L1 Analyst (in training) · Cybersecurity Engineer

Hi, my name is
Muhammad Haris

a Computer Science student at City University Peshawar with a focus on web penetration testing and threat detection.

View VulnX Get in touch

Education — Bachelor's Degree in Computer Science
City University of Science and Information Technology — Peshawar

NOV 2022 — PRESENT

Identity

Muhammad Haris

Role: SOC L1 Analyst (in training)
Focus: Web pentesting, threat detection
Based: Peshawar, Pakistan
Status: Final-year CS student

3Major projects shipped

9Security tool categories

8Certifications & learning paths

2Disciplines — build & break

Overview

A quick map of this site

SOC & Blue Team

Detection & monitoring

SplunkWazuhWireshark

Jump to Focus →

Web Security

Offense & testing

Burp SuiteSQLMapNmap

Jump to Focus →

Featured project

VulnX

Automated web vulnerability assessment tool — Nmap, SQLMap and Nikto orchestrated into one PDF report, mapped to the OWASP Top 10.

View case log →

Certifications

8 paths

TryHackMe SOC L1, Google Cybersecurity, Cisco CCNA.

See timeline →

Code

GitHub

Security tools & full-stack projects.

@Haris1440 →

Get in touch

Open to SOC L1 & pentesting-adjacent roles

Contact →

02About

Grounded in both building and breaking software

I am a cybersecurity-focused Computer Science student at City University of Pakistan (Expected 2026) with a solid foundation in both secure software development and offensive security practices.

I have hands-on experience in full-stack web development, mobile application development, and software engineering, with a strong emphasis on building secure and scalable applications. Alongside development, I have developed practical expertise in web penetration testing, including vulnerability assessment, SQL injection, authentication flaws, and reconnaissance techniques using industry-standard tools.

I have successfully completed SOC L1 Analyst training and practical labs from TryHackMe, where I gained experience in log analysis, SIEM tools, threat detection, incident response, and security monitoring workflows.

$ whoami muhammad-haris $ focus SOC · Web Security · Automation $ education BS Computer Science — 2022–2026 $ status ● open to security roles $

03Security focus

Where I spend most of my time

SOC & Blue Team

SIEM — Splunk, ELK, Wazuh
Log analysis & monitoring
Wireshark, Tcpdump, Sysmon
Incident response workflows
Practicing in TryHackMe's SOC L1 labs

Web Application Security

Burp Suite, OWASP ZAP
SQLMap, Nikto, ffuf
Reconnaissance — Nmap, dorking
Authentication & injection flaws

Security Engineering

Python & Flask automation
Secure application development
PHP / MySQL systems
Linux-based tooling

04Skills & tools

Tooling across the attack & defend lifecycle

Rated by working proficiency rather than a raw score — filter by category to jump to a specific stack.

05Projects

Case log

Featured security project

VulnX

Automated Web Vulnerability Assessment Tool

Web-based tool built with Python and Flask that orchestrates Nmap, SQLMap and Nikto to detect vulnerabilities like SQL injection, XSS and open ports — then compiles the findings into a PDF report.

Target

↓

Vulnerability Analyzer

↓

PDF Report Engine

Detects — OWASP Top 10 (2017)

A1Injection A2Broken Authentication A3Sensitive Data Exposure A4XML External Entities (XXE) A5Broken Access Control A6Security Misconfiguration A7Cross‑Site Scripting (XSS) A8Insecure Deserialization A9Components with Known Vulnerabilities A10Insufficient Logging & Monitoring

PythonFlaskNmap SQLMapNikto

View on GitHub →

PRJ‑02
● shipped

Medical Store Management System

Inventory and billing system built with PHP, MySQL and Bootstrap, featuring user authentication and an admin dashboard.

PHPMySQLBootstrap

View on GitHub →

PRJ‑03
● shipped

Courier Tracking System

Real-time tracking system built with PHP, MySQL and JavaScript, featuring admin and user dashboards.

PHPMySQLJavaScript

View on GitHub →