Currently Building 🛠️

Haseeb Khalid

AI Agent Infrastructure & Security Engineering

🎓 MS Cybersecurity @ NJIT 📍 Newark, NJ 🤖 SynapsCLI Agent Runtime

Experience

Jun 2026 – Present
Praxis AI

Cybersecurity Intern

Praxis AI — AI Agent Platform for Education

  • Designed and shipped an institution-level OAuth credential broker so agent VMs never hold long-lived secrets: short-lived machine tokens scoped to {institution, VM, session}, AES-256-GCM-encrypted refresh tokens, and fail-closed on mint failure.
  • Developed a capability gateway enforcing per-agent tool policies via HMAC-authenticated identity tokens (mint/verify/revoke), with request-level allow/deny and per-call audit logging.
  • Remediated a multi-tenant credential-isolation flaw where a second agent reused the first's session; delivered isolated per-session provisioning across concurrent agents, proven with 73 tests.
  • Established the AWS ECS production deployment path: guest-agent authentication via Secrets Manager with least-privilege scoped IAM task roles.
  • Shipped a 23-tool HubSpot CRM capability slice behind a typed-argument safety layer — dry-run by default, explicit confirm gates, no type coercion — with the institution gate enforced before any network call in all seven write handlers.
  • Ran a nine-agent adversarial review of the shipped surface and remediated five findings, including a credential leak writing an API token verbatim into an immutable audit column.
Aug 2025 – Dec 2025
NJIT

Graduate Teaching Assistant

New Jersey Institute of Technology

Lead TA for CS408/CS608 (Cryptography & Security). Mentoring 100+ students in PKI, TLS/SSL, threat modeling, and secure coding practices.

Feb 2023 – Oct 2024
CloudDefense.ai

Staff Security Engineer

CloudDefense.ai (CNAPP)

  • Architected EASM product (Python/Go) discovering 10k+ assets across AWS/Azure/GCP.
  • Engineered Zero Trust IAM policy engine reducing over-permissioned access by 78%.
  • Built secure microservices (Spring Boot/FastAPI) handling 1M+ daily requests with 99.9% uptime.
  • Analyzed 50+ malware samples and developed SIEM detection rules.
  • Automated CIS Benchmark compliance via Terraform, resolving 500+ misconfigurations.
Jan 2022 – Nov 2022
BugBase

Head Security Researcher

BugBase

  • Led pentesting for 20+ clients; found 150+ vulnerabilities (SQLi, IDOR).
  • Authored ISO 27001:2013 ISMS documentation covering 114 controls.

Education

New Jersey Institute of Technology

MS in Cybersecurity and Privacy

Jan 2025 – Dec 2026

Specializing in cloud security, appsec, and cryptography. Currently serving as a Graduate Teaching Assistant.

Cloud Computing Network Security Cryptography Counter Hacking

Manipal Institute of Technology

B.Tech in Computer and Communication Engineering

Aug 2019 – July 2023

Graduated with a minor in Computational Intelligence. Active in cybersecurity research and competitive CTF leadership.

Computational Intelligence Data Structures OS Design

Certifications

CompTIA Security+

CompTIA (SY0-701)

Issued Nov 2024

Google Cybersecurity

Google Career Certificates

Issued July 2021

Projects

SynapsCLI

2026

Terminal-Native AI Agent Runtime

Production-ready agent orchestration runtime built in Rust. Multi-agent coordination via Model Context Protocol (MCP), async task execution with Tokio, persistent memory, semantic tool routing, and role-based access controls. Supports 20+ agent types with sub-200ms response times. Comprehensive testing suite and modular architecture. 238K LOC, 3,583 tests, 8 binaries across a 3-crate workspace, 3ms startup.

Rust Tokio MCP SQLite ONNX

Myx

2026

Terminal Music Client

Open-source Rust TUI music client. 177 stars, 12 forks, 15 releases; 12 of 16 community pull requests merged from 6 external contributors, and 21 user-filed issues triaged.

Rust ratatui OAuth 2.0 MPRIS

Darqual

2026

Metadata-Dark Anonymous Messenger

9-crate Rust workspace designed to make "who-talks-to-whom" unanswerable to a global passive observer. ed25519/x25519 identities, ChaCha20-Poly1305 sealed boxes, a hand-rolled Double Ratchet, and encrypted headers over live Tor onion transport. 170 tests across 15 releases, #![forbid(unsafe_code)], key zeroization, and a published threat model.

Rust Tokio Tor (Arti) Applied Cryptography

Glyph

2026

MCP Security Scanner & Runtime Proxy

Open-source security platform for Model Context Protocol (MCP). Dual-mode: static config scanning + real-time traffic interception via proxy. 14 detection rules covering prompt injection, rug pulls, credential leaks, tool shadowing, and cross-tool attack chains. Red-team validated against real-world CVEs (Invariant Labs, Anthropic Git MCP, marmelab PoC). 83% detection on 23-vector research corpus. Zero false positives. 252 tests.

Python ONNX JSON-RPC SQLite PyPI

VelociRAG

2026

RAG Engine for AI Agents

Open-source 4-layer retrieval engine fusing vector search, BM25 keywords, knowledge graph traversal, and metadata filtering with RRF + cross-encoder reranking. ONNX-only — no PyTorch, no GPU, no API keys. Sub-200ms warm search. Ships with MCP server, CLI, and Unix socket daemon. Published on PyPI, AUR, and the official MCP Registry. 654 tests, 36K LOC.

Python ONNX FAISS SQLite MCP

Memkoshi

2026

Agent Memory Library

Open-source memory system for AI agents. Three-tier extraction (local regex, LLM API, pi RPC), staged review pipeline with HMAC-SHA256 integrity signing, and 4-layer semantic search via VelociRAG. Features pattern learning with access-weighted importance scoring, tiered boot context, staleness caveats, and bulk document ingestion. Cross-agent compatible — works with Claude Code, Gemini CLI, or any MCP agent. 321 tests.

Python SQLite FAISS ONNX MCP

NiteSpeed

2025

Security Platform for Startups

API-first security platform combining web vulnerability scanning (TLS, headers, XSS) with AWS cloud posture checks and CIS compliance mapping. Engineered modular recon pipeline with Docker.

Python Docker Redis JWT AWS

Security Homelab

Ongoing

Self-Hosted Infrastructure + AI Agent Platform

Headless Linux server running 20+ Docker containers with Nginx reverse proxy, Pi-hole DNS, WireGuard VPN, and full observability (Prometheus, Grafana, Loki). Hosts a 12-agent AI orchestration system with semantic search and persistent memory.

Docker Linux Prometheus Grafana WireGuard Nginx
Private Lab

MyxJam

2025

Spotify Playlist Generator

Full-stack web app with Spotify OAuth integration enabling users to create personalized playlists merging top tracks from multiple artists.

React/Next.js Spotify API OAuth

AudioLine

2022

CLI YouTube Player

Lightweight terminal-based audio player with URL/search playback and autoplay functionality using Python media libraries.

Python CLI YouTube API

Technical Skills

🤖

AI & Agent Systems

Multi-agent Orchestration RAG Semantic Search Knowledge Graphs Agent Memory MCP ONNX Runtime FAISS Prompt Engineering Evaluation Design
🛡️

Security Domains

Cloud Security (AWS/Azure/GCP) AppSec (SAST/DAST) Penetration Testing Vulnerability Assessment EASM Zero Trust IAM & Policy DevSecOps Cryptography
📜

Standards

OWASP Top 10 OWASP ASVS CIS Benchmarks NIST CSF ISO 27001 MITRE ATT&CK CVSS PCI DSS
🛠️

Security Tools

Burp Suite Pro OWASP ZAP Nessus Acunetix Metasploit Nmap Wireshark Nuclei ffuf sqlmap CloudSploit Prowler ScoutSuite Trivy Snyk SonarQube Semgrep
☁️

Cloud & DevOps

AWS Azure GCP Docker Kubernetes Terraform Jenkins GitHub Actions CI/CD
💻

Programming

Python Rust Java JavaScript / Node.js Go Bash SQL C/C++ Tokio

Frameworks & APIs

Spring Boot FastAPI Flask REST APIs GraphQL JWT / OAuth 2.0

Professional Engagement & Leadership

OWASP

Member

OWASP Foundation

  • Active member of the Open Worldwide Application Security Project.
  • Contributing to community security standards and awareness.
NICC

Member

NJIT Info & Cybersecurity Club

  • Participating in workshops and collaborative security research at NJIT.
  • Engaging with fellow students on latest cyber threats.
Cryptonite

Head of Web Exploitation & Team Captain

Cryptonite (Manipal Institute of Technology)

Oct 2019 – Sep 2022

Led a 25-member team in 50+ global CTFs, achieving top 10 placements internationally.

20+ Challenges Designed
800+ Teams Managed (niteCTF)
50+ Competitions