Security Researcher · AI Security

Making systems a harder target in cyberspace.

I'm Maila Zahra. I work on AI and cybersecurity: LLM security, AI agents for security operations and vulnerability analysis, and evaluating how AI systems hold up under attack.

Top 4

BSides Fargo CTF (USA), 200+ teams

Top 5

Pakistan at Black Hat MEA 2024

5

Research papers and op-eds published

4

Security roles across SOC, research and engineering

About

Security researcher working on AI security.

I research where AI and cybersecurity meet: securing LLMs and AI agents, and using them to make security work better. I build and evaluate security AI agents, study where they fail, and design security challenges that test AI models. My goal is research that makes real software more secure.

Education

BS Cyber Security

Air University, Islamabad · Sep 2021 – 2025

Ranked 9th in Pakistan in Cyber Security programs

Thesis

Phishing and Brand Protection: Safeguarding Your Organization in Cyberspace Using AI/ML

Major coursework

Network SecurityInformation Security & Risk ManagementCryptographyOperating SystemsPenetration TestingDigital ForensicsSoftware EngineeringData Structures

Research interest

AI & Security Research

  • Autonomous AI agents and agentic workflows
  • LLM security, offensive AI and AI red teaming
  • Automated exploitation and pentesting agents
  • Security challenges for testing AI models
  • Agent trace analysis (LangSmith)
  • AI evaluation frameworks and benchmark design

Research interest

Security Operations & Data Analysis

  • AI-based SOC log analysis
  • Alert triage and false-positive reduction
  • Network security tools (IDS/IPS, honeypots)
Expertise

A complete toolkit for detection, response and governance

From agent frameworks to SIEM pipelines to the standards that tie them together.

AI & Agent Tooling

LangGraphLangSmithPrompt engineeringMulti-agent frameworksNLP

Security Operations

SIEM analysisLog analysisThreat intelligenceOSINTNetwork traffic monitoring

Vulnerability Management

ScanningRisk-based prioritizationRemediation trackingFirewall configuration

Standards & Frameworks

ISO/IEC 27001ISO/IEC 42001NIST RMFNIST AI RMFCIS ControlsGDPRPISF 2026CTDISRMITRE ATT&CKOWASP LLM Top 10

Tools & Platforms

SplunkELK StackSnortpfSenseNmapWiresharkOWASP ZAPNessusKali LinuxAutopsyFTK Imager

GRC & Documentation

Policies, standards & SOPsRisk registersAudit & compliance reportsIncident response proceduresBC/DR documentation
Experience

Where I've worked

Security operations, research and engineering roles across academia and industry.

Sep 2025 – Present

Islamabad, Pakistan

Air University CSOC

Air University Islamabad

  • Built a multi-agent AI framework that triages alerts, detects false positives and drafts incident response playbooks, connected to Splunk and ELK.
  • Improving the framework with prebuilt benchmarks, prompt engineering and cost-cutting strategies; set up automated AI-based analysis of SOC logs.
  • Monitored security events in Splunk and ELK: alert triage, log correlation, escalation and false-positive tuning.
  • Ran vulnerability assessments with Nessus, Nmap and OWASP ZAP, feeding risk-prioritized results into risk registers and treatment plans.
  • Aligned ISO/IEC 27001:2022 and PISF requirements with CSOC operations, mapping Annex A controls (8.15, 8.16, 5.24–5.28, 8.8) to SIEM use cases, alert rules and SOPs.
  • Performed control gap analyses, compiled audit evidence, maintained policies, SOPs and IR playbooks, and tracked SOC and compliance metrics.
SplunkELKMulti-agent AIISO 27001PISF

Sep 2025 – Present

Islamabad, Pakistan

Cyber Security Lab Engineer

Air University Islamabad

  • Delivered ICT support across hardware, software and network troubleshooting.
  • Configured and maintained computer networks for reliable connectivity and secure data flow.
  • Applied parallel and distributed computing concepts to optimize system performance.
  • Conducted digital forensic investigations, analyzing evidence and preparing formal reports.
NetworkingDigital Forensics

Jun 2024 – Mar 2025

Remote

Network Engineer Intern

Cytomate, Qatar (Doha)

  • Contributed to an AI-based brand protection tool targeting phishing and impersonation.
  • Supported real-time network monitoring and automated incident detection.
  • Provided input on incident response workflows and threat detection automation.
Brand ProtectionAINetwork Monitoring

Jun 2023 – Sep 2023

Pakistan

Security Researcher Intern

Siber Kuza — NASTP

  • Performed network vulnerability assessments and penetration testing.
  • Analyzed security incidents and supported threat intelligence reports.
  • Assisted in compliance documentation aligned with cybersecurity standards.
PentestingThreat Intel
Research & Projects

Building tools that make attackers' lives harder

Offensive AI, agentic tooling for security operations, brand protection, deception systems and quantum-era readiness.

Offensive AI

Automated Pentesting AI

Generates vulnerability-specific exploitation agents at runtime through meta-prompting, covering 50+ vulnerability types. Agent traces are analyzed in LangSmith to find where agents fail and improve them.

Offensive AIMeta-promptingExploitationLangSmith
Ongoing research

Security AI Agents & AI Harness for Network Security Tools

Researching and building security AI agents with LangGraph, LangSmith and prompt engineering, plus an AI harness that drives IDS/IPS and honeypot systems.

LangGraphLangSmithIDS/IPSHoneypots
Supervisor: Dr. Zunaira Jalil

AI-Based Brand Monitoring Tool

Python tool that monitors brand mentions across social platforms and forums, using NLP and sentiment analysis to flag impersonation, phishing and fake profiles with real-time alerts.

PythonNLPPhishingBrand Protection
Supervisor: Engr. Maryam Mehmood Malik

Honeypot System for Threat Detection & Network Forensics

Low-interaction honeypot simulating vulnerable services to capture malicious traffic, with real-time logging and alerting for threat intelligence and SOC training.

HoneypotForensicsSOC
Research study

Post-Quantum Cryptography & Digital Security

Analysis of NIST PQC standardization and what it means for security policy, cryptographic risk assessment, migration planning and governance in critical sectors.

PQCNISTGovernance
Publications

Peer-reviewed research and op-eds

Contributions to cyber law and policy, anti-forensics, smart-city infrastructure and post-quantum cryptography.

2024

A survey of cybersecurity laws, regulations, and policies in technologically advanced nations: A case study of Pakistan to bridge the gap

B. Saleem, M. Ahmed, M. Zahra, F. Hassan, M. A. Iqbal, Z. Muhammad

International Cybersecurity Law Review, Springer, vol. 5, pp. 533–561

Journal

2024

DelSec: An anti-forensics data deletion framework for smartphones, IoT, and edge devices

N. Ullah, M. Zahra, B. Saleem, M. Haseeb, M. Mughal, Z. Muhammad

International Conference on Engineering & Computing Technologies (ICECT), IEEE

Conference

2023

Smart Cities: A novel framework for energy production and harvesting using renewable energy

B. Saleem, M. M. Zia, M. Zahra, F. Ahmad, Z. Muhammad

IEEE International Conference on IT and Industrial Technologies (ICIT)

Conference

2023

Post-Quantum Cryptography: Safeguarding the Digital Future and Bolstering Security in Critical Sectors

M. Zahra, Z. Muhammad

Cyber Defense Magazine

Op-Ed

2024

The Unintended Consequences of Electrifying Police Fleets

Z. Muhammad, M. Zahra

Scholars Strategy Network

Op-Ed

International conferences attended

ICECT (IEEE)

NUML University, Islamabad · May 23, 2024

ICIT (IEEE)

FAST University, Islamabad · 2023

Achievements

Recognized in CTFs and hackathons worldwide

Top 4

BSides Fargo CTF (USA)

Outcompeted 200+ teams in exploit development.

Top 5 PK

Black Hat MEA 2024, Saudi Arabia

55th overall in advanced penetration testing challenges.

2nd

Ignite Hackathon 2024 — Red Teaming

Offensive security and vulnerability exploitation.

1st

CTS ’24 CUI Tech Summit Hackathon

Cybersecurity innovation and teamwork.

1st

PUCON CTF 2023, Punjab University

Specialized in OSINT, outperforming multiple teams.

Wall of Fame

Security recognition

Recognized for cybersecurity contributions, Aug 2024 – present.

Certifications

  • Certified in Governance, Risk and Compliance (CGRC)

    ISC2 — Red Teamers

  • Cybersecurity Essentials

    Cisco Networking Academy · Jul 2024

Leadership

  • Vice President

    Air University Cyber Security Society (AUCSS)

    Sep 2024 – Apr 2025

  • Management Lead

    Air University Cyber Security Society (AUCSS)

    Aug 2023 – Mar 2024

  • Security Lead

    3rd Annual IEEE Cyber Warfare Conference, Air University

    Dec 7–8

  • Social Media Coordinator

    Air University Air Tech Event ’24

    Apr 2024

Get in touch

Ready to make your systems a harder target?

Open to roles and collaborations in SOC engineering, AI security research and GRC.

Download my CV