Waris Damkham

I am a Security Research Engineer with an offensive security background across vulnerability research, red teaming, AI security, identity security, application security, and security tooling. My experience spans enterprise banking security and cybersecurity consulting, including end-to-end assessments across Web, API, Mobile, Network, and Identity environments, as well as red team operations focused on real-world attack scenarios, security-control bypasses, and adversary simulation.

My research interests sit at the intersection of Security, AI, and Systems, particularly AI Systems & Agent Security, Identity & Authorization, Mobile/OS Security, Vulnerability Research, and Systems Security. I also remain interested in applied AI research, especially computer vision and deep learning systems. My long-term direction is to deepen into AI systems security, identity and authorization, reverse engineering, fuzzing, mobile/OS internals, and security-focused systems engineering.

I enjoy turning research into practical outputs: PoCs, tools, open-source projects, CVEs, academic publications, and conference talks. My applied AI/ML background includes computer vision and deep learning systems. I am the creator of Oblivion Token, presented at Black Hat Asia 2026 Arsenal and DEF CON Singapore 2026 Demo Labs, a speaker at Red x Blue Pill 2026, and an upcoming speaker at Black Hat India 2026 Briefings. I have also presented academic research at IEEE QRS 2023 and IEEE InCIT 2022, and I am credited on 33 CVEs with 3 IEEE publications spanning Android OAuth 2.0 security and applied AI/ML systems.

Open to research collaborations, speaking opportunities, and graduate research pathways.