Salman Shabbir

Built automated attack-surface monitoring workflows to identify exposed services and misconfigurations. Introduced CI/CD and API security checks. Supported research into quantum-safe cryptography and security hygiene.

Performed vulnerability assessments of applications and infrastructure, documented findings and mitigation recommendations, contributed to NIST SP 800-53 control implementation, and developed security requirements. Reviewed CI/CD pipelines, cloud workloads and containerised environments.

Contributed to AppSecure.NRW secure-coding training applications. Migrated Java EE/Spring MVC to Spring Cloud microservices; developed a Soot-based null-pointer-analysis extension for Android; evaluated static-analysis tools using Infer, SpotBugs and the Juliet Test Suite.

Co-founded a software services business and developed applications using Java EE/MySQL, PHP/JavaScript and C#/ASP.NET/SQL Server.

Specialisation: Software Engineering. Thesis: Neuroprivacy: investigating the gap between users’ expectations and current practices. Relevant study included code analysis, model checking, software quality assurance and model-based systems engineering.