Security engineering
Detection logic, attack-path analysis, identity controls, cloud security, and incident workflows built around evidence rather than security theater.
- Detection engineering
- MITRE ATT&CK
- IAM and cloud controls
- Threat investigation
Zain Khalil Khan
On air
Detection engineeringSecurity operationsCloud and identityIncident responseNetwork securityOSINTApplied AIFull-stack productPython automationNext.js engineeringEnterprise ITAviation data
Eleven projects that define the portfolio11 titles
Featured WorkExplore all
New standalone systems and focused collections9 titles
Latest ReleasesExplore all
In active developmentFounder build
Currently building
Aegis Intelligence
Autonomous AI-powered penetration testing assistant that converts raw reconnaissance data into structured, actionable threat intelligence in real time. Ingests outputs from Nmap and Gobuster, performs live OSINT enrichment, and automatically maps potential vulnerabilities, misconfigurations, and attack paths.
Latest capabilities
- Built an autonomous assistant that ingests raw Nmap and Gobuster output and converts it into structured, prioritised threat intelligence in real time.
- Parsed scanner output into a normalised host, port, service, and version model, so downstream reasoning works on data rather than on text.
- Performed live OSINT enrichment against discovered hosts and services to add ownership, exposure, and known-vulnerability context.
- Mapped findings to likely attack paths, chaining a misconfiguration or outdated service into the next step an attacker would take.
Generative AIOSINTCybersecurityReactTypeScript
Chicago, ILBehind the work
Security builder. IT operator. Product-minded engineer.
I study Cybersecurity with a Computer Science minor at DePaul University while working across enterprise IT and software development. That combination shapes how I build: secure by default, useful under pressure, and grounded in the way people actually work.
Current work
NASCAR IT + Premier AI development
Education
DePaul University, Class of 2027
Engineering practice
Security, software, and AI built as one system.
My work sits where cybersecurity, computer science, and enterprise operations meet. The common thread is practical engineering: understand the threat model, build a usable product, and leave enough evidence for another person to verify how it works.
How experience shapes the workApplied AI systems
AI workflows designed for real operational data, human review, traceable outputs, and clear failure boundaries instead of unexplained automation.
- AI agents
- Retrieval and grounding
- Validation guardrails
- Workflow automation
Software and IT operations
Full-stack products and enterprise technology work shaped by reliability, maintainability, secure data handling, and the people operating the system.
- Next.js and React
- Python services
- Enterprise IT
- Secure architecture
Working method
From problem to proof
Frame the operating problem
Identify the user, trust boundaries, failure modes, and evidence needed before selecting a stack.
Build the smallest testable system
Ship a working vertical slice early, then validate behavior against realistic data and constraints.
Harden the critical path
Apply explicit controls for identity, authorization, input handling, observability, and recovery.
Document what the system proves
Separate implemented behavior from assumptions, and connect technical decisions to visible outcomes.
Trust and proof
Work connected to real organizations and working systems.
NASCAR
Enterprise IT operations
Premier
AI and software development
DePaul University
Information Assurance and Security Engineering
- Interactive demos
- 53
- Security labs
- 29
- Certifications
- 140
- Security work names the control, mechanism, and evidence behind each finding.
- Live builds are separated from case studies and externally deployed client work.
Security, software, and operations9 reads
Field NotesExplore all
Available for opportunities
Let’s build something secure, useful, and worth shipping.
I am interested in cybersecurity engineering, security operations, full-stack software development, applied AI, and enterprise technology roles in Chicago or remote.
Preferred roles
- Security engineering
- Security operations
- Full-stack development
- Applied AI engineering
- Enterprise technology