Cybersecurity researcher
Kuala Lumpur / MY
I break systems, study the patterns, and build safer ones. Offensive security meets machine learning and precise engineering.
Research / OffSec / Build01 / Profile
I look at a system and immediately want to understand how it was built and where its assumptions fail.
I’m Mahir, a cybersecurity researcher and penetration tester. My work spans web and API testing, cloud configuration review, network security, and vulnerability research. I move quickly, document clearly, and treat every finding as a path toward a stronger system.
That same instinct drives my engineering work: from production SaaS to machine-learning pipelines for zero-day vulnerability risk prediction. If the problem sits outside my current wheelhouse, I learn the missing piece and keep moving.
02 / Selected work
A local-first job application studio that captures roles, maintains a structured career profile, and runs a three-stage Ollama pipeline to tailor résumés and cover letters. A React workspace, Python REST backend, visual template editor, review workflow, and Jinja-powered HTML/PDF export keep the entire process private and on-device.
A serverless lead-capture and notification platform integrating Meta channels, Gemini, Supabase, Resend, and Cloudflare—with security reviews built into delivery.
A hands-free local Windows assistant built around wake-word activation, faster-whisper speech recognition, layered intent routing, tool execution, and text-to-speech. Everyday commands take a deterministic fast path while an Ollama model resolves only ambiguous requests.
A local-first workspace for authorized penetration testing and vulnerability assessment. It connects scope and Rules of Engagement, intercepted HTTP traffic, evidence, findings, security tools, an application behavior map, WebClone, terminal access, and a policy-controlled Ollama assistant in one Windows desktop application.
03 / Capabilities
Web / API / network testing · privilege escalation · OSINT · VAPT reporting
OWASP · WSTG · STRIDE · vulnerability analysis · experimental evaluation
Transformer models · PyTorch · pipeline design · calibration · local LLMs
AWS · Azure review · Linux administration · Bash · serverless architecture
Python · JavaScript · React · Node · databases · software delivery
04 / Experience
FSeC @ APU / APIIT
MD Infotech
05 / Credentials
FSeC @ APU / APIIT
Kuala Lumpur · 2025—2026
Amazon Web Services / 2026
Amazon Web Services / 2026
Amazon Web Services / 2026
INE Security / March 2026
Red Hat / December 2025
Red Hat / January 2025
LetsDefend / January 2025
06 / Start a conversation