At Arozen (Pvt) Ltd, I assess web applications, APIs, networks, and infrastructure, and turn findings into VAPT reports with remediation guidance.
I also led recovery from a cPanel compromise, restoring five production sites through a staged, AI-assisted workflow. For a Microsoft 365 migration, I used Microsoft Graph API and OAuth2 to move four mailboxes with message-ID deduplication and resumable progress tracking.
At Strike7, I built a benchmark harness for evaluating AI-agent skills, tool use, and prompt optimization, and developed CVE and pre-CVE intelligence tooling. I also contributed to an AI-assisted bug-bounty triage tool and researched token-cost optimization for an AWS Bedrock inference pipeline.
As a contract Red Team Engineer with Gray Swan AI, I take part in exploratory AI red-teaming engagements. My security work also includes ISO 27001:2022 implementation support and SOC 2 Type II control mapping, evidence collection, and gap analysis.
