
Usman Saeed
@usmansaeed3
Cybersecurity founder at DefZero assessing AI systems and building the SecRaptor security testing platform.
What I'm looking for
At DefZero, I advise clients on security strategy and deliver security advisory, incident response, Red Team, and application security services. I assess AI and LLM architectures, including model integrations, agentic workflows, and data flows, to help teams understand risks before deployment.
I’m also the founder and lead engineer of SecRaptor, a multi-tenant platform for automated web and API security testing, built in Python. My work includes offensive security research: in 2023, we began researching multi-turn jailbreaks and coined the Dissociative Trust Exploitation methodology.
Experience
Work history, roles, and key accomplishments
Founder | Principal Security Advisor
DefZero
Apr 2024 - Present (2 years 6 months)
▸ Lead delivery of security advisory, incident response, Red Team, and application security services; advise CEOs and CTOs on security strategy, roadmaps, and risk posture, managing engagements end-to-end from scoping to executive reporting.
▸ Perform AI/LLM security architecture reviews and assessments — model integrations, agentic workflows, and data flows against emerging threat frameworks (OWA
Freelance Cyber Security Consultant at Pro CISO B.V.
DefZero
Apr 2024 - Sep 2024 (5 months)
Worked as Freelance Cyber Security Consultant at Pro CISO B.V. at DefZero.
Founder | CEO
File Armour Ltd
Jan 2023 - Mar 2024 (1 year 2 months)
If you want to share your confidential, secret or classified files, I can help! Our solution is designed to do exactly that!
Part of the management team of the Centric Security organization. Responsible for managing and growing the offensive security team (Red Team) within Centric.
Advising the CISO on technical security issues. Furthermore helping the operational teams with security issues and threats!
Business Development Manager & Security Consultancy Lead, Cyber Defense Services
Apr 2020 - Nov 2021 (1 year 7 months)
I am part of the management team for CDS business unit. On the one hand I am pursuing my passion in cyber security by mentoring the consultants and actively participating in engagements. On the other hand, along with the management team, helping build a consultancy business by setting up road-maps, strategy as well as building all the operational components like SOPs, Templates, etc. Furthermore,
Program manager & Technical security lead, Cyber Defense Services (CDS)
Jun 2019 - Apr 2020 (10 months)
Program Manager for the CDS BU. Building and shaping the Cyber Defense Services entity in Centric. Moreover, as a Technical Security Lead, helping the technical security teams with assessments, mentoring and training.
Senior Security Consultant
F-Secure Corporation
Jun 2016 - Jun 2019 (3 years)
Bridging the gap between organization's top management's percieved vision of their organization's security posture and the real ground situation of their information security infrastructure, by performing:
- Red Team penetration tests
- Conventional penetration tests (Web Application, Mobile app, Digital Infrastructure)
- Trainings
- Awareness drills
Senior Consultant, Enterprise Risk Services
Deloitte Danmark
Aug 2015 - Jun 2016 (10 months)
Current responsibilities include:
• Creating a Red team Penetration test flow
• Leading the Red Team Penetration tests
• Performing conventional Penetration tests (Web Application, Mobile app, Digital infrastructure)
• Proposal writing
Information Security Consultant (Team Lead, Penetration Testing Service Line)
Innovative Solutions SA
Jan 2012 - Jan 2015 (3 years)
• Pre-sales Presentations
• Penetration Testing including Infrastructure Penetration Test , Web Application Penetration Test , Network Penetration Test.
• Corporate Trainings
• Incident Response
• Security Configuration Reviews
• Vulnerability Assessment for various clients
OWASP Riyadh Chapter Leader
OWASP
Sep 2012 - Dec 2014 (2 years 3 months)
Volunteer Work ,Organizing Events and Talks.
Founder
Xc0re Security Research Group
Jan 2008 - Feb 2014 (6 years 1 month)
InfoSec / Ethical Hacking Training
• Vulnerability Research
• Exploit Creation
• Maintained Social network marketing services such as Facebook [ https://www.facebook.com/pages/Xc0re-
Security-Reseach-Group/168397916536539?ref=ts ] , Twitter
http://twitter.com/#!/xc0resecurityrg .
• Maintaining Xc0re Website http://xc0re.net .
• Maintaining Blog http://xc0re.wordpress.com .
Penetration Tester
Interactive Group Of Companies
Feb 2011 - Nov 2011 (9 months)
Corporate Communication
Penetration Testing
- Red Team Penetration Test
- Infrastructure Penetration Test
- Web App Penetration Test
- Voip Penetration Test
Vulnerability Assessment
Developing Security Training Programs
Developing Security Awareness Programs
Penetration Testing Engineer
Tasaheel Information and Electronic co.
Nov 2010 - Jul 2011 (8 months)
Worked as a Freelance Contractor on Web Application Penetration Testing
Information Security Trainer
Skill Development Council, Islamabad
Apr 2010 - Apr 2011 (1 year)
- Delivered a four day training course on "Ethical Hacking", at Skill Development Council, Islamabad, April, 2011.
- Delivered a four day training course on "Ethical Hacking", at Skill Development Council, Islamabad, April, 2010
Information Security Trainer
COMSATS Institute of Information Technology
May 2009 - Jun 2010 (1 year 1 month)
- Delivered a two day training course "Ethical Hacking and Counter measures”, at Comsats Institute of `Information Technology, Islamabad, 28-29th June, 2010
- Presented a Seminar at Comsats Institute Of Information Technology, Pakistan, ”Web Application Security”, Monday 11th May , 2009.
Web Application Security Trainer
Innovative Consultants
Apr 2009 - Apr 2009 (0 months)
Delivered a One Day Training Session/Workshop, organized by Innovative Consultants, “Web Application & Security”
Team Lead Cyber Security
InterActive Group of Companies
Sep 2007 - May 2008 (8 months)
Malware Analysis
Antivirus Benchmarking
Penetration Testing
Exploit Research
Network Security Engineer
InterActive Group of Companies
Jun 2006 - Aug 2007 (1 year 2 months)
Handling Juniper Firewalls
Managing Spam Engine Technologies
Network Security Design
Sun Ray Thin Client Implementation
Education
Degrees, certifications, and relevant coursework
Harvardx on edX
Exercising Leadership: Foundational Principles
Jan 2021
eLearnSecurity
eWPT v1
Apr 2020
(ISC)²
CISSP
Jun 2017
Core Security
Core Impact Certified Professional
Feb 2011 · Expired Feb 2013
COMSATS Institute of Information and Technology
Masters in Computer Science, Network & Information Security
2008 - 2010
EC-Council
Certified Ethical Hacker (C|EH) v6
Aug 2008 · Expired Dec 2013
COMSATS Institute of Information and Technology
Bachelors in Computer Science, Computer Science
2003 - 2007
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Website
defzero.netPortfolio
secraptor.comSalary expectations
Social media
Job categories
Interested in hiring Usman?
You can contact Usman and 90k+ other talented remote workers on Himalayas.
Message UsmanGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
