/ Experience

  1. Cybersecurity & AI Engineer Intern

    Wenawa · Remote

    Jun 2026 – Aug 2026
    • Developed RiskGuard hybrid forecasting engine replacing Prophet/ARIMA with Quantile GBDT (LightGBM); integrated SHAP explainability for Basel III auditability.
    • Designed a 3D Risk Correlation Graph using pgvector topology modeling Cyber → Operational risk cascades, improving forecast accuracy ~25–35%.
    • Migrated password hashing from Bcrypt to Argon2id with a backward-compatible migration path for financial-grade security.
    • Engineered Attribute-Based Access Control (ABAC) using Casbin, replacing static RBAC for multi-tenant SaaS scalability.

  2. Cybersecurity & Software Engineer Intern

    SMB Digital Zone · Karachi, Pakistan

    2025 – 2026
    • Conducted a comprehensive security audit mapped to OWASP Top 10 and ISO/IEC 27001, identifying and remediating 14 vulnerabilities across the production stack.
    • Hardened authentication by replacing Math.random() OTP generation with crypto.randomInt(); implemented rate limiting, input validation, and authentication bypass protections.
    • Resolved all npm dependency vulnerabilities to zero across the production Node.js/Express codebase.
    • Deployed a Next.js 15 frontend and Node.js/Express backend on an Ubuntu VPS using Docker; managed 8 live production containers behind nginx with SSL/TLS via Certbot.
    • Architected and executed a zero-downtime multi-region AWS migration (UAE → Jeddah) to mitigate regional latency; improved Lighthouse scores from ~60 to 84 mobile / 93 desktop.

  3. Freelance Cybersecurity Consultant & Bug Bounty Researcher

    Independent · Remote

    2018 – Present
    • Conducted full-stack penetration tests for NDA clients covering web, API, and infrastructure layers.
    • Identified an unauthenticated Mastercard/Maestro cardholder PII exposure; responsibly disclosed via HackerOne (PCI DSS scope).
    • Active researcher on HackerOne, Bugcrowd, and Intigriti across web, mobile, and API programs.