Md Sadikul
Islam
Red Team Researcher
A results-driven Red Team Researcher with 6+ years of experience in penetration testing across web, mobile, APIs, Active Directory, and AI/LLM systems. Skilled in APT simulations, EDR and antivirus evasion, and custom offensive tool development. Recognized by 100+ organizations including Microsoft, Apple, NASA, and the U.S. Department of Defense, with 5 published CVEs.
Who I Am
I am a results-driven Red Team Researcher with 6+ years of experience specializing in deep penetration testing and offensive security assessments. My expertise spans across web applications, mobile platforms, APIs, Active Directory environments, and the cutting-edge attack vectors of AI/LLM systems.
I specialize in executing realistic APT simulations, bypassing advanced EDR and antivirus systems, and developing custom offensive tools to systematically challenge defense postures. My security research has been recognized by over 100 industry-leading organizations—including Microsoft, Apple, NASA, and the U.S. Department of Defense—and has resulted in 5 published CVEs.
In addition to active operational assessments, I am highly committed to the global cybersecurity community. I serve on advisory boards, organize industry events, speak at tech conferences, and author custom CTF challenges to help train the next generation of cybersecurity talent.
Where I've Worked
Red Team Researcher
- Lead offensive simulations across network, web, API, mobile, Active Directory, and LLM/AI surfaces
- On-premises red teaming assessments in bigger customer networks
- Collaborating on the development of an internal AI/LLM platform to enhance and strengthen red team operations
- Document and report findings and provide recommendations for mitigating vulnerabilities
- Collaborate with R&D and sales teams to ensure all security requirements are fulfilled
Penetration Tester
- Executed network, API, and web application assessments uncovering critical vulnerabilities
- Delivered detailed exploit narratives and mitigation plans to engineering teams
- Provided subject matter expertise during live incident response and remediation cycles
Tools of the Trade
Hall of Fame
Responsible disclosures acknowledged by the world's leading organizations.
Vulnerability Disclosures
Public Talks
Credentials
Academic Background
- Strong foundation in computer science theory and engineering principles
- Practical skills in programming, software development, and system design
- Advanced studies in computer security and machine learning practices