Offensive testing,
defensive architecture.

Security isn't a feature you bolt on at the end; it's the foundation every line of code rests on. I think like an attacker so I can build like a defender.

approach

# philosophy.txt
assume_breach     = true
trust_boundaries = explicit
least_privilege  = default
test_offensive   = continuously
defense          = layered, not perimeter

capabilities

Penetration Testing & Ethical Hacking offensive

End-to-end penetration testing engagements across web applications, APIs, and infrastructure: scoping, execution, reporting, and remediation validation, with clear, actionable findings for engineering teams.

Secure Systems Architecture defensive

Designing systems where security is structural, not cosmetic. Threat modeling, boundary definition, secure-by-default configuration, and architecture review applied from the earliest design stages.

Threat Detection & Incident Response operational

Designing and implementing security controls, supporting incident response activities, and validating remediation efforts in production environments.

Governance & Compliance assurance

Contributing to SAMA CSF implementation, MVC and CRFR assessments, and cybersecurity governance, connecting regulatory requirements to engineering reality.

End-to-End Secure Product Development strategic

Leading secure product engineering at HIBRA from architecture through deployment. Authentication, authorization, data protection, and supply-chain hygiene baked into the development lifecycle.

specialized · BCI security

Brain-computer interfaces produce some of the most sensitive data a human can generate. My research at Aether focused on neural-data encryption, threat models unique to BCI systems, and resilient protection across the neuro-data pipeline, from acquisition to inference.

toolkit

Offensive: penetration testing methodology, ethical hacking, vulnerability research, exploitation techniques
Defensive: threat modeling, secure architecture review, hardening, access control design
Assurance: SAMA CSF, MVC and CRFR assessments, cybersecurity governance, remediation validation
Engineering: Python, secure software development, algorithm development, scientific research methods
Operations: incident response, threat detection, security monitoring, forensic analysis
Foundations: Computer Hardware, IoT, Data Science, Programming Fundamentals

community

Leader · Organizing Committee Sep 2024 - Aug 2025

Cybersecurity Club, PSAU

Led the organizing committee for cybersecurity events, training programs, and community initiatives, following a year as student volunteer in the same club.