// secure_session.init
press any key or click to skip
SYSTEM READY // SCROLL TO EXPLORE

Umme Kulsoom

SCROLL
// profile

whoami

Cybersecurity undergraduate at COMSATS University Islamabad with hands-on experience across VAPT, Security Operations, Cyber Threat Intelligence, and GRC & Compliance.

I focus on bridging the gap between offensive testing and defensive operations by building practical security tools. Serving as President of the university's cybersecurity society, I am passionate about driving hands-on learning, CTF participation, and community engagement in the cybersecurity space.

whoami.sh
roleBS Cybersecurity '28
focusVAPT · SOC · CTI · GRC
leadsARC Cyber Society
locationIslamabad, Pakistan
langsEnglish · Urdu
# status: shipping & learning, daily.
// operations

Where I've operated

Three cybersecurity internships across national infrastructure, incident-response teams, and offensive security — plus four years of self-managed remote client delivery.

Jul – Aug 2026
Islamabad · Onsite
Tooling · GRC

Cybersecurity Intern

NADRA — National Database & Registration Authority
  • Built ThreatLens, a full-stack vulnerability-intelligence portal (Python, FastAPI, SQLite) processing 1,000+ CVEs — consolidating NVD, CISA KEV, and FIRST EPSS feeds with automated CPE resolution, CVSS/EPSS scoring, and MITRE ATT&CK mapping.
Aug 2026
Remote
VAPT · CTI

Cybersecurity / VAPT & GRC Intern

PK NCERT
  • Delivered 7 technical reports and project write-ups by executing VAPT cycles and applying OWASP Top 10 testing for SQL Injection, XSS, CSRF, and authentication flaws.
  • Produced compliance-relevant threat intelligence and published reproducible work to GitHub for team reuse.
Nov 2025 – Jan 2026
Hybrid
Offensive Sec

VAPT Intern, Offensive Security

Resecurity
  • Assessed authorized targets across the full VAPT lifecycle — running reconnaissance and attack-surface discovery, surfacing exploitable web-application weaknesses.
  • Supported faster remediation by documenting findings with evidence, severity ratings, and prioritized fixes in confidential client engagements.
2021 – Present
Remote
Client Delivery

Freelance Virtual Assistant & Client Support

Independent
  • Delivered reliable remote support to 20+ clients across communication, scheduling, and CRM/lead workflows using Slack, Discord, Zoom, and Trello.
  • Demonstrated 4+ years of consistent, self-managed remote delivery.
// build log

Projects & hands-on work

Security tooling and applied research — each build rendered as its own module in the system.

// capabilities

The stack

Grouped by domain and color-coded the way a security console flags what it's watching.

// contact

Open a secure channel

Available for security roles, internships, and collaboration in VAPT, SOC, threat intelligence, and GRC. The inbox is always monitored.