Sr. Principal Engineer at a semi-government entity · Advisor to the CEO, Boudl Hospitality Group.
Technical leader and security engineer turning complex engineering organizations into resilient, high-trust platforms.
10+
Years of experience
3
Platforms delivered
30+
Engineers led in one team
15+
CVEs disclosed
98.4%
ML detection accuracy
Flagship engagement
Boudl Hospitality Group
Digital Transformation & Information Security Advisor to the CEO · 2024–present
A transformation mandated by the CEO, delivered as three platforms by an engineering team built for the job — with NCA ECC controls designed into the architecture rather than added afterwards.
- Mandate
- Advisor to the CEO
- Team
- 10 engineers, built and led
- Delivered
- Three production platforms
- Security
- NCA ECC embedded in delivery
01 / 03 — Platform
Boudl App
Guest-facing mobile application
The guest's own entry point to the group's properties — the mobile surface through which a stay is found, booked and managed.
02 / 03 — Platform
Boudl Sign
Digital signature platform
Agreements and operational paperwork moved onto a controlled digital signing flow instead of being handled by hand.
03 / 03 — Platform
Boudl PMS
Property management system
The operational core behind the front desk: the system of record for properties, inventory and daily hotel operations.
Illustrations are stylized representations of what each platform does. They are not product screenshots.
Read the case studyWhat I do
Transformation Leadership
Steering CEO-sponsored digital transformation programs from strategy through delivery.
Platform Engineering
Architecting and leading the engineering teams that ship and operate production platforms.
Offensive Security
Finding and disclosing critical vulnerabilities across widely deployed software.
AI & Automation
Building autonomous tooling that scales security assessment and research.
Offensive security research
Critical vulnerabilities found and disclosed across widely deployed open-source platforms.
Swipe to explore →
15+ CVEs + 30+ GHSA advisories.
Plus additional advisories across GLPI, Piwigo, AVideo, Lychee, WeGIA, SuiteCRM, OpenCart, and Filament.
Built tools
Research automation and platforms built to scale security assessment.
Autonomous Assessment Pipeline
Multi-agent workflow for recon, vulnerability hunting, CVE mapping, exploit drafting, and reporting.
Security Auditor
Python/FastAPI/Docker scanner platform for SQLi, XSS, SSRF, XXE, SSTI, CSRF, race conditions, JWT, and path traversal, with a validation layer that cuts false positives.
TrustChain
ML certificate reputation model for pre-execution malware detection — 98.4% accuracy across 1.2M profiled certificates.
Career timeline
Swipe to explore →
Community
Teaching, organizing, and triaging alongside Saudi Arabia's security community.
Tuwaiq Academy
Instructor training the next generation of engineers in offensive security.
SAFCSP
Organizing national CTF competitions and bug bounty programs.
BugBounty.sa
Triaging vulnerability reports across the Kingdom's bug bounty platform.
Writing
Vulnerability research and coordinated disclosure write-ups.
Get in touch
Let's build resilient platforms, and the teams that defend them.
The best way to reach me is by email.