Mir Salman Nomaan

ICT Graduate — Cyber Security & Computer Science

mirsalmannomaan@gmail.com linkedin.com/in/nomaan00 github.com/MISAN0 Hobart, Tasmania

Graduating Dec 2026 Seeking graduate, ICT support and help desk roles Location Hobart, Tasmania

Professional Summary

Final-year Information and Communication Technology student at the University of Tasmania, majoring in Computer Science and Cyber Security, graduating December 2026.

Builds and secures software end to end: REST APIs hardened with TLS and security headers, a Python tool that audits APIs for information disclosure, and machine learning models evaluated on imbalanced real-world data.

Alongside full-time study, three years of frontline security operations — including regulated maritime access control at TasPorts.

Looking for a graduate or entry-level ICT role in service desk, technical support, cyber security or networking.

Selected Achievements

Delivered three years of frontline security operations while studying full time, with no break in enrolment
Built a Python security auditing tool from original research spanning 13 academic and industry sources
Developed a full-stack web application of roughly 1,000 lines without relying on a framework
Shipped production-style code in seven programming languages across 11 documented projects
Implemented Dijkstra and A-star pathfinding from first principles, with no external libraries
Trained and evaluated deep learning models, including convolutional, recurrent and generative networks

Technical Skills

Programming

Python · C · Bash / Shell · Git & GitHub · Java · C# / Unity · pytest

Web & APIs

REST APIs · HTTP & JSON · Node.js & Express · FastAPI · Authentication · PHP & MySQL · Input Validation · Web Scraping

Cyber Security

Network Security · API Security · OWASP API Top 10 · Threat Modelling · Cryptography · TLS & Certificates · Digital Forensics · Incident Response · MITM Analysis · Ethical Hacking

Networking

TCP/IP · Subnetting & VLSM · LAN / WAN Configuration · Routing & Switching

Systems & Servers

Linux · Operating System Internals · Server Administration · Server Hardening · Cloud Computing

AI & Machine Learning

scikit-learn · TensorFlow & Keras · CNNs & LSTMs · PyTorch · Natural Language Processing · GANs & Autoencoders · Reinforcement Learning

Data Engineering

SQL · Pandas · PySpark · Hadoop & MapReduce · Spark MLlib · Statistics · Data Visualisation

Practice & Process

Technical Writing · Agile & Scrum · Research & Analysis · UML Modelling · UX Evaluation · PRINCE2 · SFIA Framework

Professional Skills

Communication under pressure · Team collaboration · Problem solving · Attention to detail · Time management · Customer service · Conflict de-escalation · Technical documentation · Adaptability

Selected Projects

API Exposure Auditor — Cyber Security Tool

2026

Audits REST API endpoints for information disclosure — exposed OpenAPI and Swagger documentation, permissive CORS policies, missing security headers — and emits structured JSON reports for triage.

Technologies: Python, REST APIs, OpenAPI, OWASP

OpenAPI Exposure Research — Security Research

2026

A structured investigation into the information disclosure risk created by publicly exposed Swagger and OpenAPI endpoints in production APIs, and what actually reduces it.

Technologies: Research, OWASP API Top 10, CWE-200, Threat Analysis

Hardened Node.js API Server — Backend

2025

An Express API served over HTTPS using its own TLS certificates, hardened with Helmet security headers, an explicit CORS policy, and request logging.

Technologies: Node.js, Express, Helmet, TLS, Cheerio

Spam Detection Classifier — Machine Learning

2025

A text classifier trained on a deliberately imbalanced spam dataset, evaluated on the metrics that survive class imbalance rather than on raw accuracy.

Technologies: TensorFlow, Keras, NLP, scikit-learn

Distributed Data Pipelines — Data Engineering

2026

PySpark pipelines over multi-table flight and weather data, taking the same analysis from a single machine to a distributed engine.

Technologies: PySpark, Hadoop, MapReduce, Spark MLlib

Education

Bachelor of Information and Communication Technology — University of Tasmania

2023 – Dec 2026

Hobart, Tasmania · Double major: Computer Science and Cyber Security

Relevant coursework: Intelligent and Secure Web Development, Advanced Cyber Security and eForensics, Cyber Security and Ethical Hacking, Cyber Security Policies and Practices, Data Networks and Security, Server Administration and Security Assurance, Operating Systems, Big Data and Cloud Computing, Machine Learning and Applications, Introduction to Data Science, Data Structures and Algorithms, ICT Project Management and Modelling

Certifications

CCNA 200-301 — in progress, targeting Oct 2026
CompTIA Security+ SY0-701 — in progress, targeting Dec 2026

Professional Experience

Security Officer — Kevlar Security Services

2023 – Present

Hobart, Tasmania

Manage crowd control at sporting events, concerts, festivals and licensed venues, maintaining public safety across large crowds
Enforce access control and static guarding across maritime, construction, retail and commercial office sites
Execute incident response and escalation procedures under pressure, documenting events for client reporting

Security Officer — MA Security

Dec 2023 – Dec 2025

Hobart, Tasmania

Delivered maritime security at TasPorts, enforcing regulated access controls across critical port infrastructure
Conducted asset protection and undercover loss prevention, identifying and de-escalating theft incidents
Monitored surveillance systems and maintained accurate incident records for client review

Retail Team Member — Coles Supermarket

Oct 2023 – Present

Hobart, Tasmania

Resolve customer issues in a high-volume retail environment while meeting service standards
Maintain stock accuracy and floor presentation as part of a rotating team

References

Dr James Montgomery Senior Lecturer in ICT University of Tasmania

Azaz Gondal ICT Academic Staff & Cyber Security Analyst University of Tasmania · Intuit

Samuel Horton ICT Academic Staff University of Tasmania

M Haneef Security Manager Kevlar Security Services

Contact details available on request.

Keyword index 58 terms

Cyber Security · Information Security · Network Security · Application Security · Incident Response · Risk Assessment · Threat Analysis · Vulnerability Assessment · Digital Forensics · Penetration Testing · Access Control · OWASP · TCP/IP · Routing and Switching · Subnetting · Cisco IOS · Firewalls · TLS · Encryption · Linux · Windows · Server Administration · System Hardening · Help Desk · Cloud Computing · Virtualisation · Technical Support · Service Desk · Troubleshooting · Python · Java · C · C# · JavaScript · PHP · Bash · SQL · Git · REST APIs · Node.js · Express · FastAPI · MySQL · Docker · Machine Learning · Deep Learning · TensorFlow · PyTorch · Data Analysis · Pandas · PySpark · Hadoop · Data Visualisation · Agile · Scrum · PRINCE2 · Technical Documentation · Stakeholder Communication

Open to graduate, ICT support and help desk roles

ICT Student / Cyber Security & Computer Science

Mir Salman Nomaan

A computer enthusiast on the road to mastery — levelling up through cyber security, networking, and AI, one lab at a time.

Level4
University units passed21
GraduatingDec 2026
Based inHobart, Tasmania

Degree progress87.5% complete

262.5 of 300 credit points passed · Bachelor of ICT, graduating Dec 2026

Current quests GitHub ↗ LinkedIn ↗

Attributes — self-rated, 0 to 10

CYBER Cyber Security 8/10 Network defence, API security, ethical hacking, incident response, digital forensics
NET Networking 7/10 TCP/IP, routing and switching, subnetting and VLSM, LAN/WAN configuration — CCNA in progress
PROG Programming 7/10 Python, C, Java, C# and Bash — data structures, algorithms, automated testing
AI AI & Machine Learning 7/10 Neural networks, deep learning, natural language processing, reinforcement learning
DATA Data Engineering 7/10 SQL, Pandas, PySpark and Hadoop — wrangling, statistics, visualisation at scale
SYS Systems & Servers 8/10 Linux administration, operating system internals, server hardening, cloud fundamentals
COMM Communication 8/10 Technical writing, documentation, teamwork, and client-facing project work

01 Quest Log

Active and queued, tracked against objectives. 5 active · 1 queued

◈ In progress Oct 2026

CCNA 200-301

Cisco certification

Routing and switching on Cisco IOS: VLANs and trunking, spanning tree, OSPF, IPv4 and IPv6 addressing, NAT and DHCP, access control lists, and device hardening — configured and troubleshot in the CLI, not just read about.

Subnet any prefix in under 60 seconds
Network fundamentals and switching
VLANs, trunking and spanning tree
OSPFv2 configured and troubleshot from scratch
Practice exams at 85% twice running

Cisco IOSRouting & SwitchingOSPFSubnetting

2 of 5 objectives 40%

Next: Section 5 — TCP/UDP and the transport layer +400 XP

◈ In progress Ongoing

This Portfolio

Personal project

The site you are reading. Static HTML, CSS and JavaScript with no build step and no framework — every panel renders from a single data file.

Data-driven rebuild — one file drives the site
Live on a custom domain
Plain CV view for recruiters
Refine every section

JavaScriptCSSSVGDesign

3 of 4 objectives 75%

Next: Refine each section, then keep it current +150 XP

◈ In progress Dec 2026

CompTIA Security+ SY0-701

Cyber security certification

The vendor-neutral security baseline: threat actors and attack types, cryptography and PKI, identity and access management, secure network and cloud architecture, incident response, digital forensics, and risk and compliance frameworks.

General security concepts
Threats, vulnerabilities and mitigations
Security architecture and operations
Practice exams at 80% twice running

Threat AnalysisCryptographyIAMIncident Response

2 of 4 objectives 50%

Next: Threats, vulnerabilities and mitigations +400 XP

◈ In progress Ongoing

Open the Vault

Open source

Move the projects in the Artifacts section out of local folders and onto public GitHub repositories — credentials stripped, READMEs written, and licences attached, so the code can be read rather than described.

Audit every project for keys, certificates and connection strings
README and licence written for each repository
First three repositories public
Every artifact on this page links to its source

GitGitHubDocumentationCode Review

0 of 4 objectives 0%

Next: Scrub credentials, then publish the first repository +200 XP

◈ In progress 2026 / 2027

First Contact

Job search

The search for the first ICT role. Service desk, technical support, or a junior position anywhere across ICT — applications going out, interviews prepared for, and every rejection turned into a fix.

Portfolio live on its own domain
One-page CV written and downloadable
Applications sent
Interview reached
Offer signed

Service DeskTechnical SupportInterviews

2 of 5 objectives 40%

Next: Applications out to Hobart and remote graduate intakes +300 XP

◇ Queued 2027

The Home Lab

Hands-on practice

A small lab to practise on hardware that is allowed to break: virtualised hosts, a segmented network, a firewall in front of it, and a log collector behind it. Somewhere to actually run the attacks and defences the units only describe.

Hypervisor host running
Segmented VLANs behind a firewall
Linux and Windows servers to attack and defend
Central logging and alerting

VirtualisationFirewallsVLANsLogging

0 of 4 objectives 0%

Next: Hypervisor host and the first two virtual machines +250 XP

02 Objectives

The long arc — outcomes rather than tasks, and roughly when. 2 of 13 checkpoints cleared

In progress Dec 2026

Finish the degree

The foundation everything else is built on.

Bachelor of Information and Communication Technology at the University of Tasmania, double major in Computer Science and Cyber Security. 262.5 of 300 credit points cleared.

21 units passed
Final two units, including the capstone
Graduate

1 of 3 checkpoints

In progress Oct & Dec 2026

Get certified

A degree shows I can learn. A certification shows I can do the work.

Networking first, then security. Vendor certifications that stand on their own in front of an employer, independent of the degree.

CCNA 200-301
CompTIA Security+ SY0-701
CySA+ or a cloud security certification

0 of 3 checkpoints

Next 2026 / 2027

First role in ICT

The fastest way into the industry is through the door. Specialisation comes after.

Service desk, technical support, or a junior role anywhere across ICT, cyber security, networking, or AI. Australia-based, and ready to start at the bottom of a good team.

Portfolio live
CV ready and applications out
First ICT role

1 of 3 checkpoints

Longer term 2028 onward

Become the person on call

Support teaches you the systems. Operations is where you defend them.

Move off the service desk and into a security operations or network team — triaging real alerts, reading real packet captures, and owning a slice of the infrastructure. Long enough in that seat to be the one others escalate to, rather than the one escalating.

Two years of hands-on ICT experience
Move into a SOC, network or infrastructure team
CySA+ or CCNP Security on top of real work
Own an incident end to end

0 of 4 checkpoints

03 Skill Tree

Every skill carries the unit, certification, or project it came from — so the rating is a citation, not a claim.

Aware Familiar Working Confident Strong 🔒 Learning next

Cyber Security

10 · 2 strong

Defensive and offensive work across the same systems — finding the weakness, then closing it.

Learning next: Cloud Security

Networking

5 · 2 strong

The layer everything else runs on. Addressing, routing and switching, learnt in the CLI.

Learning next: OSPF

Systems & Servers

5 · 2 strong

What happens under the application: processes, memory, filesystems, and the servers they run on.

Learning next: Kubernetes

Programming

8 · 4 strong

Languages picked up per problem rather than per fashion — systems work in C, everything else in Python.

Web & APIs

9 · 5 strong

Building services and then attacking them: authentication, transport security, and what an API leaks.

AI & Machine Learning

9 · 3 strong

Models trained and evaluated properly — on the metrics that survive imbalanced data, not on accuracy.

Data Engineering

7 · 2 strong

Moving analysis from one machine to a cluster, and querying what lands there.

Learning next: Kafka

Practice & Process

7 · 3 strong

How the work gets planned, documented and handed over — the half that is not code.

What the unit codes mean 21 units

KIT101Programming Fundamentals

KIT102Introduction to Data Science

KIT103Computational Science

KIT105ICT Professional Practices

KIT107Programming

KIT111Data Networks & Security

KIT202Web Programming Fundamentals

KIT203ICT Project Management & Modelling

KIT205Data Structures & Algorithms

KIT208Virtual & Mixed Reality Technology

KIT213Operating Systems

KIT214Intelligent & Secure Web Development

KIT215Cybersecurity & Ethical Hacking

KIT219Development Methodologies & UX

KIT304Server Administration & Security Assurance

KIT305Mobile Application Development

KIT307Computer Graphics & Animation

KIT315Machine Learning & Applications

KIT318Big Data & Cloud Computing

KIT325Advanced Cybersecurity & eForensics

KMA153Data Handling & Statistics 1

04 Artifacts

Things I built, what they do, and how they were built. Source is going up on GitHub project by project. 11 projects · 0 on GitHub

legendary Cyber Security Tool

API Exposure Auditor

2026 · Solo

Built on my own research into what publicly exposed API specifications leak
Findings framed against the OWASP API Security Top 10 and MITRE CWE-200
Machine-readable output, so results can feed a pipeline rather than a person

PythonREST APIsOpenAPIOWASP

Code being prepared for GitHub

epic Security Research

OpenAPI Exposure Research

2026 · Solo

A structured investigation into the information disclosure risk created by publicly exposed Swagger and OpenAPI endpoints in production APIs, and what actually reduces it.

Thirteen sources: ten peer-reviewed papers plus OWASP, MITRE CWE and the OpenAPI specification
Traced how specification-driven fuzzers turn a published schema into an attack surface
Produced the risk framing the API Exposure Auditor was then built against

ResearchOWASP API Top 10CWE-200Threat Analysis

Written work — available on request

epic Backend

Hardened Node.js API Server

2025 · Solo

An Express API served over HTTPS using its own TLS certificates, hardened with Helmet security headers, an explicit CORS policy, and request logging.

TLS terminated by the application itself rather than assumed from a proxy
Secure defaults applied deliberately: headers, origin policy, audit logging
Paired with a Cheerio scraper that normalises fetched pages into JSON

Node.jsExpressHelmetTLSCheerio

Code being prepared for GitHub

epic Machine Learning

Spam Detection Classifier

2025 · Solo

A text classifier trained on a deliberately imbalanced spam dataset, evaluated on the metrics that survive class imbalance rather than on raw accuracy.

Class weighting applied so the minority class is not simply ignored
Assessed on ROC and precision-recall curves with confusion matrices
Seeds fixed throughout, so a rerun reproduces the reported numbers

TensorFlowKerasNLPscikit-learn

Code being prepared for GitHub

epic Data Engineering

Distributed Data Pipelines

2026 · Solo

PySpark pipelines over multi-table flight and weather data, taking the same analysis from a single machine to a distributed engine.

SparkSession and cluster configuration tuned for the workload
VectorAssembler feature pipelines feeding Spark MLlib classifiers
MapReduce fundamentals implemented directly, not just called

PySparkHadoopMapReduceSpark MLlib

Code being prepared for GitHub

epic Web Application

Full-Stack Web Application

2024 · Solo

A database-backed PHP application with user registration and login, session handling, content creation, search, and an archive — around a thousand lines, built without a framework.

Registration and authentication with server-side validation on every route
MySQL schema behind the create, search, archive and post views
Shared header and footer components rather than copied markup

PHPMySQLJavaScriptSessions

Code being prepared for GitHub

rare Algorithms

Graph Pathfinding Engine

2025 · Solo

Dijkstra and A-star written from scratch in C over a custom graph structure, with a heuristic function and explicit closed-set tracking.

No library containers — the graph, queue and sets are all hand-built
Two search strategies over one structure, so their behaviour is directly comparable
Built alongside binary search trees, hash tables and priority queues

CDijkstraA-starData Structures

Code being prepared for GitHub

rare Cryptography

Steganography & Cipher Tool

2023 · Solo

Hides a message inside a carrier by encoding characters to binary and applying a multiplicative cipher over modular arithmetic, with a matching decoder.

Encryption and extraction implemented as exact inverses of one another
Modular arithmetic chosen so each key maps reversibly across the symbol set
Written test cases drive the implementation rather than following it

PythonCryptographyModular Arithmetic

Code being prepared for GitHub

rare Systems

UNIX Records Manager

2024 · Solo

A POSIX shell toolset for employee record management — menu-driven search, add and delete, with log rotation and a user access-deny list.

Portable POSIX shell rather than bash-only syntax
Access control enforced through a deny list at the entry point
Log management handled by the tool instead of left to grow

ShellPOSIXLinuxAccess Control

Code being prepared for GitHub

rare Game Development

Game AI & Pathfinding

2024 · Solo

A Unity game with hand-written agent AI: A-star navigation across a generated node graph, seek and wander steering behaviours, and path-following agents.

Node graph generated from the level rather than placed by hand
Steering behaviours composed instead of scripted per enemy
Shipped with a playable build and a development log

C#UnityA-starSteering AI

Code being prepared for GitHub

rare Security Analysis

Incident Response & Threat Analysis

2025 · Team

Breakdowns of real intrusions — NotPetya and the Sony Pictures compromise — traced from initial access through to impact, with a response plan built on the Australian Cyber Security Centre template.

Attack paths reconstructed from public incident reporting
Man-in-the-middle attack analysis with practical defences
Response plan mapped to a recognised national framework

Incident ResponseMITMACSCForensics

Written work — available on request

05 Campaign Log

Work and study, in order. Three years of security operations alongside the degree.

2023 – Dec 2026 Now

Bachelor of Information and Communication Technology

University of Tasmania · Hobart

Double major: Computer Science and Cyber Security
Coursework across cyber security, networking, systems, software and data
262.5 of 300 credit points completed

Cyber SecurityComputer Science

2023 – Present Now

Security Officer

Kevlar Security Services · Hobart

Crowd control at sporting events, concerts, music festivals, clubs and pubs
Static guarding and access control across maritime, construction, mall and office sites
Venue control for local festivals

Crowd ControlAccess ControlStatic GuardingMaritime

Dec 2023 – Dec 2025

Security Officer

MA Security · Hobart

Maritime security at TasPorts, working to regulated port access controls
Retail security, asset protection and undercover loss prevention
Crowd control across licensed and public venues

Maritime · TasPortsAsset ProtectionUndercoverRetail

Oct 2023 – Present Now

Retail Team Member

Coles Supermarket · Hobart

Customer service and fast issue resolution in a high-volume store
Team operations, stock accuracy and floor organisation

Customer ServiceOperations

06 Achievements

Earned, not aspirational — each one names the fact behind it. 3 gold · 4 silver · 2 bronze

◆ 2025 – 2026

Breaker and Builder Works both sides of security — finds the weakness, then closes it Ethical hacking and hardened, secure-by-default builds

✦ 2025

From First Principles Built the fundamentals by hand instead of importing them Dijkstra, A-star, hash tables and priority queues in C

◈ 2026

Published Researcher A structured security study built on peer-reviewed sources 13 sources, OWASP and MITRE CWE mapped

⚔ 2023 – now

Dual Wield Full-time study carried alongside two jobs Three years, no break in enrolment

🛡 2023 – 2025

Critical Infrastructure Security operations on a regulated port Maritime security at TasPorts

◇ 2023 – 2026

Polyglot Shipped working code in seven languages Python, C, Java, C#, PHP, JavaScript, Bash

⬢ 2025

Deep Learner Trained neural networks beyond the tutorial level CNNs, LSTMs, GANs and reinforcement learning agents

⬡ 2026

Scaled Up Took an analysis from one machine to a cluster PySpark and Hadoop over multi-table data

▲ 2026

Shipped It Built and published this site on its own domain Static, no framework, one data file

Party up.

Finishing a Computer Science and Cyber Security degree in Hobart, and looking for the first role in ICT — service desk, support, or anything that puts me next to real systems. If you have one, I would like to hear about it.

Open tograduate, ICT support and help desk roles

Based inHobart, Tasmania

GraduatingDec 2026

Emailmirsalmannomaan@gmail.com LinkedInlinkedin.com/in/nomaan00 GitHubgithub.com/MISAN0