Ts. Khairul Anwar Muhd Ali

About

I am a Professional Technologist (Cyber Security) with over 8 years of experience in cybersecurity, currently driving Threat and Vulnerability Management (TVM) efforts at Setel. My work focuses on identifying, assessing, and reducing security risks across diverse technology environments while supporting business continuity and regulatory alignment. Previously, I led the Offensive Security Department at Nexagate, delivering end-to-end security testing, threat simulation, and red teaming services for clients across financial services, government, telco, fintech, and insurance sectors. 🛡️ My core areas of expertise include: - Threat & Vulnerability Management (TVM) - Red Team Operations & Adversary Simulation - Vulnerability Assessments & Penetration Testing (VAPT) - Secure Code Reviews & Threat Modeling - Cloud Security Assessments (AWS, Azure, GCP) - Threat Intelligence & Cyber Threat Profiling - Tabletop Exercises & Cyberdrill Simulations - Security Maturity Assessments & Gap Analysis - Cybersecurity Advisory & Compliance (BNM, ISO27001, NIST) - Incident Response & Root Cause Analysis I am passionate about improving security maturity through practical strategies, data-driven threat intel, and proactive engagement. I also enjoy mentoring junior talents, leading technical training sessions, and engaging with business and tech stakeholders to align security efforts with real-world risks. Let’s connect and work together to strengthen cyber resilience.

Experience

• Setel (1 yr 6 mos)
  • Manager I, Cyber Threat, Intelligence & Incident Management
    Dec 2025 - Present · 11 mos

  • Dec 2025 - Present · 11 mos
    Present

  • Lead, Cyber Threat, Intelligence & Incident Management
    May 2025 - Dec 2025 · 8 mos

• Nexagate (7 yrs 3 mos)
  • Senior Security Consultant (Lead)
    Feb 2021 - May 2025 · 4 yrs 4 mos

  • Federal Territory of Kuala Lumpur, Malaysia · Hybrid
    Assist CTO to lead Offensive Security Department. 1. Decision maker for Department when CTO is absent 2. Help CTO in team member growth plan 3. Presales rep for department 4. Department's SME and help another department. 5. Join and present technical part in technical presentation during presales phase 6. Present during kick off, project project and finding presentation. Deliver day to day project basis related to: 1. Vulnerability Assessment 2. Penetration Testing (Network, Web App, No Code/Low App, API, Mobile App, Thick Client App, Thin Client App, Terminal) 3. Source Code Review 4. Cloud Assessment 6. Red Teaming 7. Compromise Assessment 8. Digital Forensic (Email, memory, network) 9. Cyberdrill and Tabletop Exercise 10. Hardening Consultation 11. In-house and external Cybersecurity Trainer 12. Incident Response consultation 13. DevSecOps Consultation Client Served: 1) Government Agency 2) Banks, FSI and Insurance 3) Telco 4) Fintech

  • Senior Security Consultant
    Mar 2018 - May 2025 · 7 yrs 3 mos

    Assist CTO to lead Technical Security Department. Deliver day to day project basis related to: 1. Vulnerability Assessment 2. Penetration Testing (Network, Web App, No Code/Low App, API, Mobile App, Thick Client App, Thin Client App, Terminal) 3. Source Code Review 4. Red Teaming 5. Digital Forensic (Email, memory) 6. Hardening Consultation 7. In-house and external Cybersecurity Trainer 8. Incident Response consultation 9. DevSecOps Consultation

• Cyber Security Consultant at Mycrypto Sdn. Bhd.
  Jan 2016 - Dec 2017 · 2 yrs

  Vulnerability Assessment and Penetration Testing (VAPT) / Security Posture Assessment (SPA) Network and Mobile Forensics Network Security Review Source Code Security Review Mobile Application Penetration Testing (Android)