Looking for a job

Jawad Shams

@jawadshams

Message

I build AI-driven malware detection and conduct hands-on penetration testing.

Pakistan

Message

What I'm looking for

I'm seeking cybersecurity research, penetration testing, or AI-driven security roles where I can combine offensive testing, memory forensics, and threat detection to help teams respond faster than attackers adapt.

I've conducted authorized VAPT engagements at Cyber Hawks, progressing through reconnaissance, enumeration, exploitation, post-exploitation, and CVSS-scored reporting with remediation recommendations.

My research focuses on detecting fileless malware from memory artifacts. I designed a Volatility-based pipeline using Random Forest, XGBoost, LightGBM, SHAP, and MITRE ATT&CK mapping that achieved 99.99% detection accuracy and a 0.017% false-positive rate on CIC-MalMem-2022.

In my security research home lab, I build Python and Bash reconnaissance and enumeration tools and investigate web, network, and Active Directory attack scenarios across Kali Linux, Metasploitable, Windows Server, and DVWA.

I'm extending this work into multi-agent threat hunting and evidence-aware forensics for cloud-native environments, combining offensive security practice with AI-driven detection and response.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher

Current

Home Lab

Jan 2022 - Present (4 years 8 months)

Maintained an isolated multi-VM lab to research web, network, and Active Directory attack scenarios. Built custom Python/Bash tools for reconnaissance and enumeration; conducted a responsible security assessment of KFUEIT's web infrastructure and disclosed findings to the university IT department.

Kali Linux Metasploitable2 Windows Server DVWA Python BASH Reconnaissance Enumeration Active Directory Web Security Network Security

Information Systems Intern

Fauji Fertilizer Company

Jun 2026 - Jul 2026 (1 month)

Supported enterprise IT operations including system monitoring, network troubleshooting, and infrastructure maintenance. Assisted in documenting internal security practices, access control policies, and data management workflows.

System Monitoring Network Troubleshooting Infrastructure Maintenance Access Control Data Management

Education

Degrees, certifications, and relevant coursework

EC-Council

Certified Ethical Hacker (CEH v13), Cybersecurity

2026 - 2026

Certified Ethical Hacker (CEH v13) certification from EC-Council.

Khwaja Fareed University of Engineering & Information Technology

Bachelor of Science, Cybersecurity

2022 - 2026

Grade: 3.03/4.0

Bachelor of Science in Cybersecurity with coursework in network security, ethical hacking, digital forensics, and cryptography. Achieved a CGPA of 3.03/4.0.