Saood Nasir Sangle

Flight Report Automation Pipeline — Aviation Oasis

Architected and deployed a containerized, stateful asynchronous backend automation workflow designed to ingest unstructured pilot post-flight logs, process payloads through strict validation boundaries, and expose interactive distributed endpoints using secure communication channels.

Engineered Architecture Workflow:

• Ingestion & AI Structuring: Established an IMAP listener watching the operations gateway, instantly offloading unstructured texts to OpenRouter API with optimized system prompts executing programmatic JSON schema extraction.
• Secure Webhook Exposure: Wrapped local execution instances securely inside a containerized cloudflared daemon (Cloudflare Tunnel), mapping public edge addresses to inner webhooks without opening hazardous inbound router ports on local firewalls.
• Asynchronous HITL State Machine: Formulated state freezing routines utilizing n8n context data structures ($execution.resumeUrl) embedded into Telegram callback channels, letting managers review, selectively edit, or reject transactions natively on-screen without active memory leaks.

Analyzing WAF Resilience Against Obfuscated Attack Payloads

Evaluated the perimeter resilience of ModSecurity v3 coupled with OWASP CRS 3.3.7 on Apache 2.4 fronting the Damn Vulnerable Web Application (DVWA)[cite: 17, 18]. Developed a token-preserving request duplication layer to measure exactly how input transformations distort structural parsing across strict threshold configurations[cite: 19, 20].

Empirical Testbed Matrix (Experimental Results) [cite: 18, 662]

Core Analytical Contributions:

• Libinjection Verification: Proved signatureless tokenizers cleanly process padded and comment-folded SQLi payloads without relying on upper paranoia configurations[cite: 216, 217].
• XSS Detection Borders: Mapped out why DOM breakout rules are deferred until PL3+ to mitigate false positive penalties across harmless public corporate traffic templates[cite: 211, 667].
• Late-Stage Surfacing Flaws: Analyzed input transformation sequencing conflicts where multi-pass URL decodings (e.g., %257C) trigger scoring anomalies that result in sub-threshold execution slips[cite: 228, 229].

MSc in Cyber Security

Enrolled within a fully National Cyber Security Centre (NCSC) certified program housed at an Academic Centre of Excellence in Cyber Security Research (SCCS). Advanced training focuses heavily on implementing secure engineering defenses, defensive software design, and perimeter threat modeling:

Core Domain Specializations:

• Network Defense Engineering: Analyzing deep packet headers, evaluating threat vectors across complex topologies, and implementing secure cryptographic protocol barriers protecting the network stack.
• Systems & Platform Security: Practical auditing of software vulnerabilities, exploring runtime boundary compromises (memory corruption, access management), and deploying hardened system structures.
• Data Protection & Cryptographic Protocols: Structuring enterprise data security systems backed by symmetric/asymmetric encryption models, signature algorithms, and key management lifecycles.
• Infrastructure Management & Risk Governance: Translating industrial control standards (NIST, ISO 27001) into operational business frameworks, mapping corporate risk matrices, and designing incident response mitigation loops.
• Hands-On Penetration Testing & Cloud Automation: Practical training in offensive security simulations, vulnerability analysis via automated frameworks, and building highly scalable, containerized infrastructure securely.

B.E. in Electronics Engineering

Four-year professional engineering foundation providing an extensive architectural edge. Merging strict physical hardware engineering backgrounds cleanly with software platform operations:

• Advanced analysis of circuit layouts, digital processor microarchitectures, and hardware systems programming.
• Robust tracking of physical routing paths, system data-buses, and fundamental network communication layer invariants.

Professional Credentials: CompTIA Security+ — Course Training Completed