Ashar Khalil

Security Engineer

Software Engineering Daily • Período integral

Apr 2024 - Nov 2025 • 1 yr 7 mos

Performed source code reviews and integrated SAST tools into CI/CD pipelines, enabling early detection and remediation of vulnerabilities. Executed DAST testing using OWASP ZAP and Burp Suite, identifying and addressing critical security risks in web applications. Tested OWASP API security standards on API's at scale. Developed and enforced security checklists, ensuring consistent adherence to best practices and compliance requirements. Conducted prompt injection testing on LLM-based applications to detect and mitigate AI-specific security vulnerabilities. Designed and implemented a Responsible AI framework to evaluate and validate AI decision-making processes. Conducted automated testing for AI applications, achieving 95% accuracy in detecting incorrect responses and ensuring reliable performance. Leveraged AWS GenAI capabilities to accelerate AI application testing, improving efficiency and reducing time-to-test. Automated recurring HR operations as a side initiative, streamlining workflows through AWS-based automation solutions.