Yasin
Saffari
Cybersecurity consultant and penetration testing specialist with over eight years of experience securing enterprise infrastructure, financial systems, and government networks. CISSP, CISM, CISA, OSCP, and CCIE certified.
Securing the infrastructure that powers critical operations.
Cybersecurity specialist and senior Purple Team consultant with over eight years of professional experience in advanced penetration testing, vulnerability assessment, APT simulation, kill chain analysis, and incident response development. Career spans engagements with government agencies, financial institutions, and banking systems, including Tejarat Bank.
Expertise encompasses risk management, digital forensics, secure software development lifecycle (SSDLC), threat intelligence, and regulatory compliance across ISO 27001, NIST, GDPR, and PCI-DSS frameworks. Holds CISSP, CISM, CISA, OSCP, and CCIE certifications among 35+ industry credentials.
As Head of Cybersecurity Services at Amn Gostaran Farzan, leads multidisciplinary security teams, designs security architectures, and drives vulnerability management programs.
Consulting & Engagement
Professional cybersecurity consulting for organizations requiring expert-led security assessments.
Penetration Testing
Comprehensive offensive security assessments covering web, mobile, network, and cloud.
- Web Application Security
- Mobile App Pen Testing
- Internal & External Network Testing
- Cloud Infrastructure Review
- API Security Testing
Purple Team Operations
Collaborative adversary simulation combining offensive tactics with defensive detection.
- Full Purple Team Engagement
- Adversary Emulation (MITRE ATT&CK)
- Detection Rule Validation
- SOC Assessment
- Custom Threat Scenarios
Vulnerability Research
Deep-dive vulnerability discovery for critical infrastructure, IoT, and enterprise software.
- Zero-Day Discovery
- Binary Analysis & Reverse Eng
- ICS/OT Assessment
- Malware Analysis
- Exploit Development
Security Advisory
Strategic guidance for executive leadership. Architecture, compliance, and risk.
- Security Architecture Design
- ISO 27001 / NIST / PCI-DSS
- Incident Response Planning
- Security Program Maturity
- Virtual CISO
Training & Workshops
Customized training for development teams, IT ops, and executive leadership.
- Secure Coding Practices
- Purple Team Methodology
- Executive Awareness
- CTF Events
- Threat Modeling
Consultation Hours
One-on-one sessions for security reviews, second opinions, or advisory.
- 30-Min Quick: $150
- 60-Min Deep-Dive: $250
- Retainers Available
- Video or Encrypted Chat
- 24-Hour Response
Professional Trajectory
Eight years of progressive responsibility in offensive security and leadership.
Head of Cybersecurity Services
Leading the cybersecurity services division. Technical scoping, methodology design, effort estimation, project execution, client communication, and final reporting. Managing purple team operations and driving operational efficiency.
Cyber Security Specialist
Web app pentesting, ICS/OT assessments including PLC-level testing, Splunk SIEM deployment, proprietary tool development, exploit development, security audits, and internal network pentesting.
Web & Mobile Application Pentester
Web and mobile application security assessments for European enterprise clients.
Cyber Security Manager
Directed cybersecurity operations, managed security initiatives, and established governance frameworks.
Web & Mobile Pentester
Web and mobile application penetration testing for international education technology platforms.
Penetration Tester
Infrastructure penetration testing, network security assessments, and vulnerability evaluations.
Penetration Tester
Web application and infrastructure pentesting, vulnerability assessment, and security consulting.
Open Source Work
Public repositories on GitHub.
Technical Expertise
Pen Testing
Offensive SecurityRed Teaming
Adversary SimulationPurple Teaming
Offense + DefenseExploit Dev
Binary ExploitationReverse Eng
Malware AnalysisPython
AutomationC / C++
SystemsWeb Security
OWASP Top 10Network Sec
Internal PentestICS/OT
PLC & SCADASplunk
SIEM & SOCISO 27001
ComplianceForensics
Incident ResponseSecure SDLC
DevSecOpsTeam Lead
Security OpsSecure Coding
Code ReviewSecure Headers
HTTP SecurityCloud Security
AWS / GCPThreat Modeling
Risk Assessment35+ Industry Certifications
One of the most comprehensively certified professionals in the region.
CISSP
ISC²CISM
ISACACISA
ISACACCIE
CiscoApple Certified Trainer
AppleOSCP
OffSecAWAE
OffSecAdvanced Evasion
OffSecCBBH
HackTheBoxCertified Red Team Operator
RedTeam AcademyCEH
NooraNetAdvanced Web Hacking
Ravin AcademyWeb Hacking Professional
Ravin AcademyOWASP Top 10
Ravin AcademyMobile Reversing
BlackHatAdvanced Web App Pentester
NooraNetWeb App Hacking
EC-CouncilOWASP Top 10 Vulns
EC-CouncilMobile App Pentester
TCM SecurityMobile Device Security
NooraNetJavaScript Security
Ravin AcademyPractical Network Pentester
TCM SecurityPractical Ethical Hacking
TCM SecurityLPIC-1
Linux Professional InstituteLPIC-2
Linux Professional InstituteLPIC-3
Linux Enterprise ProfessionalSplunk Certificate
SplunkAdversary Emulation
SANS / GIACLEG523
GIACGIAC
Global Info AssuranceMalware Analysis
Ravin AcademyMalware Development
Ravin AcademySystem & Kernel
Ravin AcademyThreat Hunting
Ravin AcademyPurple Team
Ravin AcademyWeb3 Security
Ravin AcademyGNU Debugger
Pentester AcademyStart a Conversation
Reach out directly. Response within 24 hours.
Direct Contact
Engagement Process
Initial Consultation
Scope, objectives, timeline, budget.
Proposal & Scoping
Methodology, deliverables, pricing.
Execution & Delivery
Assessment with regular updates.
Report & Remediation
Findings with remediation guidance.
Availability
your digital assets?
Let's discuss how I can help protect your organization. Book a free consultation today.