Muhammad Zohaib Zafar

I'm conducting black-box and gray-box web application penetration tests for international Fiverr clients, finding XSS, SQL injection, and CSRF issues against the OWASP Top 10. My Burp Suite and manual fuzzing workflow reduced assessment time by 20% and supported a 95% critical-finding fix rate within one month.

I've built AART, a sandboxed framework for red-teaming autonomous LLM agents, including 30 multi-step scenarios for tool misuse and privilege escalation. I also created TruthLens, a GPU-free multimodal misinformation screening pipeline that achieved 95.35% precision and an 88.17% F1-score.

My security engineering work includes deploying Wazuh SIEM monitoring aligned to SOC 2, building active-response automation that reduced MTTR by over 60%, and integrating SAST, DAST, and SCA into CI/CD workflows. I'm especially interested in offensive security, application security, threat detection, reverse engineering, and AI security.