Cybersecurity undergraduate focused on offensive security research, malware development and analysis, and security tool engineering, with hands-on experience building practical tooling across Windows internals, wireless security, and vulnerability assessment.
Hussain is a Cybersecurity undergraduate at Air University, Islamabad, focused on offensive security research, malware development and analysis, and security tool engineering. His work spans hands-on tool development across Windows internals, wireless security, and vulnerability assessment, alongside a Summer 2025 internship contributing to DSOC, an AI-assisted SOC/SIEM platform, at Dassoft / SiberKoza / NASTP. He is also active in the CTF community as both a participant and a challenge developer.
Outside of security research, Hussain runs a freelance technology practice across Islamabad and Rawalpindi — installing and repairing CCTV systems and smart-home devices, and managing networking for homes and small businesses. His long-term goal is to build a company at the intersection of cybersecurity and AI.
A hypothetical bank compliance framework (SBP/ISO 27001/PCI DSS/NIST CSF), plus grcmap: a cross-framework GRC mapping and gap-analysis engine grounded in the real current versions of all four frameworks.
A Flask student-records app with role-based access control, atomic audit logging, layered rate limiting, and a CI pipeline (Ruff/pytest/Bandit/pip-audit) -- not just a CRUD demo with security controls bolted on.
A hands-on 802.11 deauth-attack lab (Aircrack-ng) plus deauthguard/, a real passive Scapy/Python flood detector -- the defensive counterpart the original lacked.
A lab demonstration of hash cracking with John the Ripper/Johnny, plus pwaudit: a NIST SP 800-63B-4 password-policy auditor grounded in real HIBP breach data and real John the Ripper experiments.
A passive, host-based ransomware behavioral-detection engine (RansomWatch) -- explainable sliding-window rules grounded in RansomWhere?/CryptoDrop research, no malware anywhere in the repo.
An NE555-timer and D-flip-flop-based 4-way traffic signal controller, verified in Proteus simulation and on physical hardware.
Paid internship at NCSA, Air University, working as a VAPT (Vulnerability Assessment & Penetration Testing) Analyst. Officially a 2-month engagement; expected to be extended.
Contributed to DSOC, an AI-assisted SOC/SIEM module, supporting alert investigation workflows, log analysis and enrichment, and security automation.
Freelance technical delivery for international clients — mobile applications, Python projects, machine-learning model training, and research support. Occasional before 2026, regular throughout 2026.
Freelance technology practice covering CCTV installation and repair, smart-home deployment, and networking for residential and business clients — predates university enrollment; exact start date not on record.
Participated in the Capture the Flag (CTF) event at PCC 2025, held 24-27 November 2025 at Air University, Islamabad.
Competed with team Aconite in the BlackHat MEA Qualification CTF 2026 (Sep 5-6, 2026), placing #72 with 1500 points and 15 flags captured.
Participated in the SOFTEC 2025 Capture the Flag competition at FAST-NUCES Lahore with team KINGS3, as part of an Air University delegation.
Open to security research, offensive security, and tooling work — internships, collaborations, or freelance engagements.