I'm Zain, an IT support specialist eager to deepen my cybersecurity expertise and make a real impact in the tech world.
Dive into my portfolio showcasing projects in cybersecurity, log analysis, and IoT security, highlighting my technical growth and problem-solving skills.
.jpg)
Hydroficient · Jun 2026 · ✅ Verified by Extern
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
Performed network traffic analysis using Wireshark to capture and inspect packets, identifying anomalies and potential security events as part of coursework
I'm Zain, an IT support specialist eager to deepen my cybersecurity expertise and make a real impact in the tech world.
I am Zain Shah, a junior at the University of Houston pursuing a Bachelor's in Computer Information Systems with a focus on Cybersecurity. Currently working in IT technical support, I have a passion for developing my technical skills and tackling cybersecurity challenges.
Externships
Hydroficient IoT Cyber Defense Externship
Completed · Jun 2026
Experience
Information Technology Technical Support
Clear Path Logic · Jun 2026 - Present
Cybersecurity Engineer Extern
Hydroficient Iot Cyber Defense Externship · Mar 2026 – June 2026
Medical Assistant
@HealthTX · Jan 2024 – June 2026
Education
University of Houston
Bachelor of Science, Computer Information Systems| Concentration: Cybersecurity · Class of 2027
CompTIA Security+
In Progress
Skills
✅ Verified by Extern
Build, hack, and defend real IoT infrastructure, then hand your security playbook to an actual company. You’ll launch realistic cyberattacks, from spoofing and replay attacks to unauthorized shutoffs, and implement defenses like TLS and mTLS.
The work recreated a hotel-scale HYDROLOGIC IoT deployment to exercise offensive and defensive techniques across the stack. Deliverables included a written STRIDE-based threat model, a runnable sensor generator, an insecure then TLS/mTLS-secured MQTT pipeline, experiments defending against replay attacks, and a real-time dashboard with an Isolation Forest anomaly detector integrated.
I delivered a defended IoT pipeline and supporting artefacts: a STRIDE threat model with three high-priority issues, a runnable WaterSensor generator, TLS and mTLS configurations, replay-defence experiments showing 100% rejection, a real-time dashboard, and an integrated Isolation Forest anomaly detector.
Performed network traffic analysis using Wireshark to capture and inspect packets, identifying anomalies and potential security events as part of coursework
Completed a simulated security audit identified risks, assessed controls, and produced a written compliance checklist
Engineered a Python based IoT sensor simulator generating 100 realistic water pressure and flow readings with anomaly detection. Performed traffic interception on an unencrypted MQTT pipeline using Mosquitto, capturing 400+ live sensor messages and documenting four critical vulnerabilities with evidence.
Reviewed detailed records to identify irregularities, applying careful attention to detail and consistent documentation practices
Completed a simulated compliance audit, assessing controls against standards and producing a written checklist to verify requirements were met
Built and tested a data monitoring tool that tracked 100 readings and flagged results falling outside expected quality thresholds; inspected 400+ data records for irregularities, identifying and documenting four issues with supporting evidence for review