At Akhtar Fuiou Technologies — Digitt+ Fintech, I test web, mobile, API, and network security for a State Bank of Pakistan-regulated digital financial services platform. I also review code and integrate SAST, DAST, and SCA scanning into build and release pipelines.
At DigiKhata, I led fintech security operations and managed a team of four security professionals. I deployed Wazuh SIEM, implemented DLP controls, and identified critical vulnerabilities including IDOR, LFI, and financial and PII data exposures.
Through Bugcrowd and HackerOne, I reported vulnerabilities including a P1 authentication bypass on Coca-Cola and an XSS issue on Tecno, earning Hall of Fame recognition. My security work spans penetration testing, secure code review, threat modeling, and AWS infrastructure hardening.
I founded HissabAI, a WhatsApp-based AI personal finance tracker for the Pakistani market, and designed its security stack on AWS. I integrated Meta WhatsApp Cloud API and Claude AI to support secure financial data and user PII flows.
