Mohammed Abdul Kareem (aka 0xiMAK)

I am an Application Security Engineer, Product Security professional, and penetration tester with over six years of experience helping organizations identify, assess, and remediate security vulnerabilities across web applications, APIs, cloud environments, and enterprise platforms.

My experience includes application security, product security, penetration testing, vulnerability assessments, threat modeling, secure code reviews, and integrating security into the Software Development Life Cycle (SDLC) through DevSecOps practices. I have hands-on experience with SAST, DAST, SCA, cloud security, and secure development practices, working closely with engineering teams to build and maintain resilient applications.

I am passionate about AI security, adversarial testing of LLM-powered applications, offensive security research, and helping organizations understand how attackers think. My interests include AI red teaming, secure software development, bug bounty hunting, and modern application security.

I have received multiple Hall of Fame recognition's and CVE acknowledgments for responsible vulnerability disclosure. Outside of my professional work, I actively contribute to the cybersecurity community through security research, CTF competitions, open-source projects, and industry conferences. I enjoy sharing practical, real-world techniques and lessons learned that security professionals and developers can immediately apply to improve the security of modern applications.