Waris Damkham

I am a Security Research Engineer with an offensive security background, working across vulnerability research, red teaming, AI security, identity security, application security, and security tooling. My professional experience spans enterprise banking security and cybersecurity consulting, conducting end-to-end security assessments across Web, API, Mobile, Network, and Identity environments, alongside red team operations focused on real-world attack scenarios, security-control bypasses, and adversary simulation.

I am particularly interested in research at the intersection of Security, AI, and Systems, including Identity & Access Security, AI/LLM and Agent Security, Mobile/iOS Security, vulnerability discovery, and increasingly low-level software and systems security. I also remain interested in applied AI research beyond security, particularly in computer vision, biometrics, medical AI, and AI systems. My long-term direction is to deepen into vulnerability research, AI systems security, reverse engineering, fuzzing, OS/kernel internals, and security-focused systems engineering.

Beyond security testing, I enjoy turning research into practical outputs: PoCs, tools, open-source projects, CVEs, academic publications, and conference presentations. My background in applied AI/ML research includes computer vision and deep learning systems. I am the creator of Oblivion Token (presented at Black Hat Asia 2026 Arsenal and DEF CON Singapore 2026 Demo Labs), an upcoming speaker ats Black Hat India 2026 Briefings and Red x Blue Pill 2026, credited on 32 CVEs, and author of 3 IEEE publications spanning Android OAuth 2.0 security testing and applied AI/ML systems.

Open to global opportunities in Security Research, Offensive Security, AI Security, Vulnerability Research, and graduate research pathways.