Hire Me #

I take on a few security engagements at a time, mostly advisory and hands-on security work.

Advisory #

Startup advisory. I built FullHunt from zero, so I help founders and early-stage teams with security strategy, building security into the product, and the technical calls that are hard to undo later.
Security advisory. Direction for security programs: what to build, what to fix first, how to reason about risk, and a second set of eyes on high-stakes changes before they ship.
Engineering and architecture design advisory. I review engineering and architecture designs for security, scale, and the trade-offs that affect scalability and performance.

Hands-on security #

Product and application security. Threat modeling, design reviews, and code and architecture assessments.
Offensive security. Penetration testing, red teaming, and vulnerability research.
AI and LLM security. Model and application security, prompt-injection defense, and AI security governance.
Cloud and infrastructure security. AWS, GCP, and Azure, plus Terraform, containers, and software supply chain.
Security programs and automation. Building the controls and automation that still hold up as a team grows.

How I work #

Most engagements are a focused assessment, an advisory retainer, or fractional security leadership. I also do research, tooling, talks, and workshops.

Tell me the problem and the timeline, and I’ll tell you if I’m the right person for it.

Background #

I’m a product and offensive security engineer and the founder of FullHunt.io. I’ve reported critical vulnerabilities to the U.S. Department of Defense, Microsoft, Meta, X / Twitter, Oracle, and LinkedIn, built open-source security tools used by thousands of people, and spoken at Black Hat MEA, DEF CON, Hack In The Box, Swiss Cyber Storm, and OWASP chapters.

There’s more on my projects and awards pages.

Contact #

Email is best: mazin[AT]mazinahmed.net