name: "Osama Khan"
role: "Cybersecurity Engineer | AI Security Researcher"
location: "🇸🇦 Riyadh, Saudi Arabia"
experience: "3+ years"
focus: ["Penetration Testing", "AI Security", "Cloud Security", "Network Security"]
certifications: ["Security+", "PenTest+", "Google AI Essentials"]
status: "🟢 Open to work"
fun_fact: "I break into systems (legally) to make them stronger 🥷"

I'm actively looking for roles as a Cybersecurity Engineer, AI Security Engineer, or IT Administrator.

Every repo here is a real, tested tool — not a tutorial clone. Clone it, run it, see it work.

Why review my work: I build small, tested, dependency-light tools that solve practical security and IT problems. Clone a project, run the documented checks, and review the code.

Hiring or know someone hiring? Reach out — LinkedIn or email above. I respond fast.

• 🌐 Linux Portfolio — my interactive portfolio, built as a Linux desktop
• 🛰️ ContextCheck — scans AI/RAG input for prompt injection and secrets
• 🛡️ PortSafe — read-only Linux check for exposed TCP services
• 🔍 AuthLog Watch — detects brute-force and suspicious logins from auth logs
• ☁️ Cloud Config Checker — flags risky cloud misconfigs without touching infrastructure
• 🧹 TidyFolder — dry-run file organizer for messy folders
• 🎓 AI Security for Students — free study path for learning AI security

I focus on small, practical projects that are easy to run and easy to review. My current learning track also connects the foundations behind these tools:

• 🛡️ Defensive security — log triage, exposed-service checks, cloud misconfiguration review
• 🤖 AI security — prompt-injection detection and input filtering before models see data
• 🖥️ IT administration — read-only Linux health checks and practical command references
• 🔐 DevSecOps — secret detection, IaC checks, and CI-friendly scan reports
• 📚 AI engineering foundations — math-first neural networks, transformers, RAG, and agents