Looking for a job

Sumaiya Arshad

@sumaiyaarshad

Cybersecurity researcher at NCSA who investigated attack paths in multi-agent AI systems and built security tools for databases and digital forensics.

Pakistan

Message

At NCSA, I conducted applied security research on AI and agentic systems, mapping trust boundaries and privilege flows to identify risks such as prompt injection, tool abuse, and privilege escalation. I also contributed to a posture-scoring approach for monitoring agentic AI environments and documented findings, test cases, and mitigation guidance.

I built Zentryx, a PostgreSQL security middleware and SOC dashboard that scores query risk and flags anomalous database behaviour. My projects also include EvideX for log integrity monitoring and incident triage, and ThreadSleuth, a parallel digital forensics engine with a C++ backend and Python dashboard.

Experience

Work history, roles, and key accomplishments

Intern

NCSA (National Cyber Security Academy)

Jul 2026 - Sep 2026 (2 months)

Conducted applied security research on AI and agentic systems, analyzing attack surfaces introduced by autonomous agents, tool use, and multi-agent orchestration. Mapped trust boundaries and privilege flows, contributed to posture-scoring, and documented findings for review.

Python LLM Agent orchestration Adversarial Prompting Docker Threat Modeling Security Research

VAPT Intern

Reblue

Feb 2025 - Apr 2025 (2 months)

Performed vulnerability assessments and penetration tests on web applications, APIs, and internal network assets. Executed scans, validated findings against OWASP Top 10, manually verified high-impact vulnerabilities, and produced structured VAPT reports with remediation guidance.

Burp suite Nmap Nessus OWASP ZAP Metasploit Python Vulnerability Assessment Penetration Testing

Intern

Offensoix

Jul 2024 - Sep 2024 (2 months)

Conducted comprehensive penetration tests on networks, applications, and systems to uncover security vulnerabilities. Designed and executed targeted exploits, analyzed findings for risk assessment, and authored detailed reports with remediation strategies.

Nmap Nessus Burp suite Metasploit Python Penetration Testing Exploitation Risk Assessment

Intern

TrilliumInfoSec

Jul 2024 - Sep 2024 (2 months)

Monitored and analyzed security events in a Security Operations Center, using SIEM tools for real-time log monitoring and threat detection. Assisted in incident triage, threat intelligence enrichment, and detailed incident reporting.

SIEM Splunk QRadar Incident Response Threat Intelligence Log Analysis