Cybersecurity Engineer
I'm Ibrahim Abdulqadir I design autonomous security agents, ship penetration testing tooling, and build the systems that make both faster. Currently focused on AI-driven attack automation.
About me
I'm a cybersecurity engineer building at the intersection of offensive security and AI automation. My work spans hands-on penetration testing and engineering the autonomous agents that can do it at scale, tools that reason through recon, map attack surfaces, and produce structured findings without a human in the loop.
Right now I'm deep in development on Sentinellog, an open-source SIEM for the businesses that can't afford Splunk. Real-time log monitoring, instant threat alerts, zero licensing fees. Because most servers running without a security team aren't secure, they just haven't been caught yet.
I also take on client engagements from security assessments of live systems to building AI agent pipelines for businesses that need automation they can actually trust.
Projects
An open-source, lightweight SIEM alternative for businesses that can't afford Splunk or QRadar. Watches server logs in real time and alerts the moment a threat appears — brute force attacks, suspicious logins, privilege escalation — with the exact evidence that triggered each alert. Built for small businesses, startups, clinics, and NGOs running servers without a security team.
Authenticated IDOR hunting tool. Logs in with real session credentials, maps endpoints that reference object IDs, then swaps IDs across privilege levels to surface broken access control.
Phishing detection system built on a Random Forest classifier trained on ~391K real phishing domains. Flask dashboard for live classification and PDF reporting.
Windows automation assistant with wake-word detection (openWakeWord) and speaker verification via voice embeddings, so it only acts on your voice. Regex-based command routing handles things like "open chrome" or "play X on Spotify," with anything unmatched falling through to an LLM. Backed by local speech-to-text (faster-whisper) and protected-process safeguards.
Network vulnerability scanner integrating Nmap with the NIST NVD API for CVE lookups, producing structured PDF reports ready for client delivery.
Autonomous smart contract pentester. Etherscan-based crawler with proxy detection and dependency mapping, paired with Slither-driven access-control auditing.
Skills
What I actually use — not a buzzword list.
Contact
Whether it's a security engagement, a tool you want built, or a question worth asking — I'm available. Reach out directly or fill the form.