Cybersecurity & DevSecOps Engineer with 3+ years of experience conducting full-scope web/network penetration testing, building Linux security daemons, and hardening enterprise CI/CD deployment pipelines.
STATUS: Available (100% Worldwide Remote / Relocation)
CURRENT_ROLE: Cybersecurity Engineer & Pentester @ ZeroxInnovation
PREV_ROLE: Digital Forensics & Security Engineer @ NCCS
EDUCATION: BS Cybersecurity — Air University Islamabad
CREDENTIALS: CompTIA PenTest+, CCEP, CSI Linux (17 Total)
STANDINGS: TryHackMe Top 3% · HackTheBox Top 800 (Level 54)
34+ published open-source repositories — packet dissectors, Linux FIM daemons, SSH hardening, and SIMD tokenizers.
DEV 5 Ansible-like Infrastructure Management Platform
Centralized infrastructure management platform similar to Ansible; orchestrates fleets of remote servers via YAML-based declarative configuration. Features JWT-based role authentication, real-time WebSocket monitoring, SSH tunneling via Paramiko, and a fully Dockerized React.js frontend.
DEV Custom Linux Shell in C with Google Gemini AI
Custom Linux shell written in C with embedded Google Gemini AI. Implements low-level C systems programming including fork/exec process management, custom HTTP client, and a security filter layer for dangerous command detection.
DEFENSIVE 4 C SIEM Agent for Event Correlation & Active Response
Lightweight C-based SIEM agent built during NCCS internship using inotify for real-time log parsing, network scanning, event correlation, and anomaly detection. Deployed into live government infrastructure at NCCS, Islamabad.
OFFENSIVE 4 Advanced Packet Analyzer for Reconnaissance
Advanced packet analyzer built with Scapy; supports 10+ protocols with real-time BPF filtering, PCAP export, and live traffic visualization. Built for network security monitoring and penetration testing reconnaissance.
DEFENSIVE SSH Tunneling & Encrypted Channel Engine
A Python SSH tunneling tool for creating secure, encrypted communication channels with local, remote, and dynamic forwarding support.
DEFENSIVE 4 SSH Security Toolkit & Brute-Force Detector
A Python toolkit for hardening SSH configurations, monitoring real-time access logs, and detecting brute-force authentication attacks.
From red-team offensive exploitation to blue-team SIEM telemetry and production DevSecOps pipeline automation.
CompTIA PenTest+, Red Team Leaders CCEP, CSI Linux Certified Investigator, arcX CTI 101, Cisco CCNA, and more.
In-depth breakdowns on Active Directory attack chains, Kubernetes runtime defense, CI/CD security gates, and reverse engineering.
Security Engineer, Penetration Tester, DevSecOps Practitioner, and Software Developer with 3+ years of hands-on experience spanning offensive security, CI/CD pipeline security, infrastructure automation, and full-stack security tool development. Author of 34+ open-source tools covering SIEM engineering, remote infrastructure management, SSH security, and network analysis. Ranked Top 3% TryHackMe globally and Top 800 HackTheBox (Professional Rank, Level 54). CompTIA PenTest+ Preparation Course Certified via Coursera with 17 total certifications.
