Aaffan.
Kanvis
A

Aaffan Khan Niazi

Security Analyst & CS Grad from LUMS | SOC Specialist | AI-Driven Threat Detection
Hire Me

Overview

Computer Science graduate from LUMS with a focus on cybersecurity and AI. Experienced in SOC operations, threat monitoring, and incident triage at Ebryx. Skilled in deploying custom SIGMA/YARA rules and conducting enterprise-level security audits. Passionate about building automated, AI-driven security frameworks.
Islamabad, Pakistan

Experience

Aug 2025 – Present

INTERNSHIP

Security Analyst Intern

Ebryx (Pvt.) Ltd.
Lahore (Hybrid)
Operated in SOC conducting real-time threat monitoring and incident triage; developed and deployed custom SIGMA/YARA detection rules integrated with ELK Stack and Wazuh, reducing manual alert review overhead. Led enterprise Cisco WLC wireless security audit using Nmap/NSE scripts; discovered 4 critical vulnerabilities including SWEET32, missing forward secrecy (no ECDHE/DHE), and deprecated TLS 1.0/1.1 configurations. Conducted wireless penetration testing with Aircrack-ng on Kali Linux; mapped deauthentication attack vectors across campus access points and recommended WPA3 + 802.11w migration as countermeasures.
•Operated in SOC conducting real-time threat monitoring and incident triage
•Developed and deployed custom SIGMA/YARA detection rules integrated with ELK Stack and Wazuh
•Led enterprise Cisco WLC wireless security audit using Nmap/NSE scripts
•Conducted wireless penetration testing with Aircrack-ng on Kali Linux
•Mapped deauthentication attack vectors across campus access points

Key Achievements

→Reduced manual alert review overhead through custom SIGMA/YARA rules
→Discovered 4 critical vulnerabilities including SWEET32, missing forward secrecy (no ECDHE/DHE), and deprecated TLS 1.0/1.1 configurations
→Recommended WPA3 + 802.11w migration as countermeasures for deauthentication attacks
ELK StackWazuhSIGMAYARACisco WLCNmapNSE ScriptsSWEET32TLS 1.0/1.1Aircrack-ngKali LinuxWPA3802.11w

Project Portfolio

ACADEMIC

Present

Enterprise Wireless Security Assessment

Independent Researcher

Identified critical cryptographic weaknesses in enterprise Cisco infrastructure: SWEET32 vulnerability, absent ECDHE/DHE cipher suites, and active deprecated TLS 1.0/1.1 endpoints.
Cisco InfrastructureSWEET32ECDHE/DHETLS 1.0/1.1
ACADEMIC

Present

Privacy-First WiFi Sensing System

Signal Processing Researcher

Deployed WiFi-DensePose framework for camera-free human presence/motion detection via RSSI fluctuation analysis and signal variance computation. Engineered real-time data pipeline with WebSocket streaming to Three.js dashboard; roadmap includes CSI integration for full skeletal pose estimation.
WiFi-DensePoseRSSIWebSocketThree.js
PERSONAL

Present

n8n Security Automation Platform

Developer

Self-hosted n8n automation platform via Docker; built Telegram OCR bot with REST API integrations for automated security alert forwarding and data extraction pipelines.
n8nDockerTelegram APIREST APIOCR
PERSONAL

Present

AI-Driven Access Anomaly Detection Framework

Senior Capstone Student

Integrated ELK Stack/Wazuh SIEM with custom ML models for real-time unauthorized access detection, behavioral anomaly detection, and automated mitigation. Built centralized SOC monitoring dashboard with real-time alert visualization and automated incident response playbook integration.
ELK StackWazuhMachine LearningSOC DashboardCisco Datasets

Education

Aug 2023 – May 2026

BSc (Hons.) Computer Science

Lahore University of Management Sciences (LUMS)Specialization in Computer Science
Thesis: AI-Driven Access Anomaly Detection Framework

Relevant Coursework

AlgorithmsDatabasesData StructuresOSNetwork Centric ComputingAI/MLData Science

Feb 2025 – Jun 2025

Semester Exchange

Middle East Technical University (METU), TurkeySpecialization in Business Administration

Aug 2021 – Aug 2023

High School Diploma

The City School, Capital Campus

Impact & Recognition

Professional Certifications

Ebryx

Advanced SOC Training Programme

CompTIA

CompTIA Networks+

arcX · 2024

Foundation Level Threat Intelligence Analyst

Expires Feb 2026

Patents & Publications

PUBLICATION

Security Research Publication

Published security research reaching 1,400+ impressions.

Skills & Interests

SIGMA Rules

Wazuh

ELK Stack

Kali Linux

YARA Rules

MITRE ATT&CK

Nmap

Elasticsearch

Logstash

Kibana

Aircrack-ng

Wireless PenTest

WPA2/WPA3

Python

Docker

Cisco WLC

FastAPI

SQL/PL/SQL

Threat Hunting

Bash

Oracle Cloud

PCI-DSS/NIST Compliance

AWS

JavaScript

Splunk

Let's Connect

I'd love to hear from you. Feel free to reach out.

These unlock once you finish onboarding and publish your profile.

More people on Kanvis

Browse more people