Saif Bin ShahabSaif Bin Shahab

Saif Bin Shahab

I'm Saif — Cyber Security Specialist

A humble seeker of knowledge stumbled upon 'Ilm, Cyber Security and IT; seeking only the pleasure of Allah.

Path

Experience

  1. Dec 2024 — Present

    Founder & CEO

    Vault47

    Running a cybersecurity company for businesses and organizations — building secure and robust systems.

    • Established a cybersecurity company in Bangladesh to secure businesses and organizations.
    • Conducted business proposal campaigns and created new connections.
    • Conducted content marketing campaigns.
    • Created the business’s portfolio website and necessary documents.
    Consultency Leadership Business Development
  2. 2023

    Cybersecurity Incident Response Consultant

    Independent Consultant - Anonymous Company

    Led real-time response to a critical cyberattack, containing the threat and restoring full operations within hours.

    • Successfully mitigated business disruption, preventing significant amount in financial and reputational risk.
    • Coordinated containment, remediation, root cause analysis, and post-incident hardening to strengthen resilience.

    Achievement: Potentially significant amount in financial and reputational risk avoidance in a real-world incident.

    Incident Response Root Cause Analysis Risk Mitigation
  3. 2017 — Present

    Cyber Security & Software Development Specialist

    Independent / Freelance

    Delivered a wide range of independent cybersecurity, IT infrastructure, and software development projects, blending technical depth with hands-on problem solving.

    Key Highlights:

    • System & Network Security: Deployed enterprise-grade security with WAF, IDS/IPS (Snort, Suricata), SIEM (Wazuh), ELK Stack, Elasticsearch, and IAM for monitoring, access control, intrusion detection, and log analysis.
    • Home Lab & Self-Hosting: Designed and maintained secure, self-hosted services including Git (Gitea), cloud storage (Nextcloud), media streaming (Jellyfin), bookmark management (Linkding), backup/sync (Syncthing), and network-wide ad blocking (Pi-hole). Hardened servers, configured reverse proxy & WAF with Traefik, and containerized workloads with Docker for efficiency and scalability.
    • Digital Forensics & Data Recovery: Performed investigations, analysis, and recovery for real-world and lab projects to strengthen understanding of data integrity and system security.
    • Exploit Development & Reverse Engineering: Reverse engineered software and games and developed exploits and mods in lab environments as security research.
    • Development & Automation: Built practical tools and utilities such as a Telegram battery status bot, an automated meeting attendance bot, a Windows optimization utility, a Markdown-to-HTML converter, a torrent tracker updater, and an ongoing AI-based music remover.
    • Performance & Reliability: Enhanced infrastructure with server hardening, SSL/TLS encryption with auto-renewal, caching strategies, and backup systems, ensuring secure and resilient environments.

    Impact: Consistently delivered optimized, secure, and high-performance systems while strengthening expertise across cybersecurity, IT operations, and software development.

    Achievements: self-hosted systems, automation, SIEM, IDS/IPS, OpenWrt firmware

    WAF IDS/IPS SIEM Docker Self-Hosting Automation
  4. Dec 2021 — Nov 2024

    Software Engineer

    Devs Core

    • Developed custom OpenWRT firmware for routers with a captive portal.
    • Our projects helped the company increase significantly in valuation (estimated ~2x) and raise significant investment.
    • Conducted a cybersecurity audit and created a well-documented audit report.
    • Recovered a production server from failure within half an hour, performed database recovery, and briefed the recovery report.
    • Helped the team with Linux and Windows system administration.
    • Received the “Enthusiastic Developer of the Year” award and a “Certificate of Appreciation” for outstanding performance.
    • Solved various software design problems and helped the team build robust software.
    • Guided the team on the open-source software journey.
    • Provided the team with answers to deep software development questions.
    • Gained extensive experience with bug fixing.
    OpenWrt Linux System Administration Bug Fixing
  5. 2024

    WordPress Developer

    Al Aqsa Food

    • Designed, developed, and deployed a full-featured e-commerce WordPress website with WooCommerce, tailored to the client’s business needs.
    • Built and optimized a custom deployment environment by manually configuring a LAMP stack, improving website speed, performance, and scalability.
    • Implemented multi-layer caching strategies: server-side caching, distributed object caching with Memcached, and client-side optimization with caching plugins.
    • Secured the platform with firewall configuration, MFA, SSL/TLS with auto-renewal, and backup system integration to ensure resilience and data protection.
    • Integrated payment gateways (bKash, Nagad, Rocket, cards, and bank transactions) for seamless online transactions.
    • Configured Cloudflare DNS management for optimized global performance and added protection.
    • Enhanced SEO optimization to drive organic traffic and improve search rankings.
    • Deployed Facebook Pixel for targeted advertising and tracking, increasing the client’s marketing ROI.

    Outcome: Improved website performance, increased sales, and strengthened the client’s online engagement.

    Achievement: High-performance, secure e-commerce deployment.

    WordPress WooCommerce LAMP SEO Cloudflare
  6. Sep 2021 — 2024

    SEO Expert

    Devs Core

    • Got websites to #1 ranking on Google’s first page within a week.
    • Conducted on-page and off-page SEO.
    • Helped with WordPress website development and creative content writing.
    • Conducted SEO training for the content writing team to help them write better SEO-friendly content.
    • Helped the digital marketing team with research and analysis for content marketing.
    SEO Content Strategy WordPress Digital Marketing

Toolkit

Skills

Security

Threat Modeling Incident Response Network Security Penetration Testing Zero Trust Architecture SIEM & Log Analysis

Systems & Infra

Linux Administration Homelab / Self-Hosting Docker & Containers Networking (VLANs, Firewalls) Proxmox / Virtualization Backup & Disaster Recovery

Development

TypeScript Python Astro & React Bash Scripting CI/CD

Islamic Studies

Aqeedah Fiqh Tazkiyah Arabic (in progress)

0+

Years in tech

0+

Clients served

0+

Projects done

0+

Articles published

Proof of Work

Projects

Real problems, and what actually resolved them.

Advanced Self-Hosting Infrastructure (Docker + Reverse Proxy)

Problem — Relying on third-party platforms for services like file storage, media streaming, and code hosting often compromises control, privacy, and scalability.

Solution — Deployed a self-hosted infrastructure running on Docker containers, with applications such as Nextcloud, Jellyfin, Gitea, and Syncthing. Secured the environment with a Traefik reverse proxy, a WAF, and automated SSL/TLS.

Outcome — A scalable, secure, and private platform, enabling complete ownership of data and services while maintaining high availability and performance.

Docker Traefik WAF SSL/TLS Nextcloud Self-Hosted

Custom OpenWrt Firmware & Router Configuration

Problem — Off-the-shelf router firmware lacked the features, security controls, and customization required for advanced labs and real-world security use cases.

Solution — Built and maintained a custom OpenWrt firmware, integrating a captive portal, custom firewall rules, QoS tweaks, logging/monitoring hooks, and secure update mechanisms.

Outcome — Turned consumer-grade routers into secure, policy-driven networking appliances — reducing attack surface and enabling guest isolation, SIEM-ready telemetry, and improved performance.

OpenWrt Firmware Networking Captive Portal QoS

WordPress E-Commerce Website (Client Project)

Problem — A client needed a fast, secure, and reliable e-commerce platform to support growing online sales, but off-the-shelf hosting solutions were slow and insecure.

Solution — Designed and deployed a custom WooCommerce site on a manually optimized LAMP stack, integrating Memcached for server-side caching, client-side caching plugins, SSL/TLS with auto-renewal, MFA, firewall rules, and backup systems. Also handled Cloudflare DNS management, SEO optimization, and multi-payment gateway integration (bKash, Nagad, Rocket, cards, and bank transactions).

Outcome — A high-performance, secure e-commerce website that improved customer experience, boosted sales, and gave the client a scalable foundation for future growth.

WordPress WooCommerce LAMP Memcached Cloudflare Payment Gateways

Security Information & Event Management (SIEM) with Wazuh & ELK

Problem — Modern infrastructures generate massive amounts of logs, but without centralized monitoring, threats can go unnoticed until damage is done.

Solution — Architected and deployed a SIEM solution using Wazuh, the ELK Stack, and Elasticsearch, integrating log collection, real-time alerting, and visualization dashboards.

Outcome — Enabled proactive threat detection and streamlined incident response, improving visibility across systems and reducing mean time to detection (MTTD).

Wazuh ELK Stack Elasticsearch SIEM Threat Detection

Intrusion Detection & Prevention System (Snort & Suricata)

Problem — Unmonitored network traffic leaves systems vulnerable to undetected intrusions and malicious activity.

Solution — Implemented and tuned Snort and Suricata IDS/IPS systems, building rulesets to detect and block suspicious traffic patterns, tested in both lab and production-like environments.

Outcome — Provided early warning against network-based threats, reducing the attack surface and enhancing overall network security posture.

Snort Suricata IDS/IPS Network Security

Exploit Development & Game Hacking (Research)

Problem — Understanding software vulnerabilities at a deep level requires working hands-on with low-level systems, memory, and reverse engineering challenges.

Solution — Conducted exploit development and game hacking research projects — writing proof-of-concept exploits, reverse engineering binaries, and creating mods and automation scripts for games.

Outcome — Sharpened skills in reverse engineering, secure coding practices, and vulnerability research — directly improving the ability to identify and mitigate real-world software security flaws.

Reverse Engineering Exploit Development Vulnerability Research

Telegram Battery Status Bot

Problem — Users often forget to monitor battery health and charging status on their devices, which can shorten battery lifespan or lead to sudden shutdowns.

Solution — Built a lightweight Telegram bot that monitors battery status and sends real-time alerts, providing insight into charging health and thresholds.

Outcome — Automated a simple but valuable use case, demonstrating practical automation with Python scripting, API integration, and lightweight notifications that improve user convenience.

Python Telegram API Automation

AI Music Remover (In Progress)

Problem — Video editors and content creators often struggle with separating vocals from instrumentals in audio tracks for remixing, karaoke, or background scoring.

Solution — Developing an AI-powered tool that leverages machine learning models to isolate vocals and instruments with high accuracy — training and fine-tuning separation models and integrating them into a user-friendly interface.

Outcome — Will enable creators to work more flexibly with audio, reducing reliance on expensive proprietary software while showcasing expertise in machine learning, signal processing, and AI application development.

Machine Learning Signal Processing Python AI

Credentials

Achievements & Certifications

Certified Cybersecurity Educator Professional (CCEP)

Certified Cybersecurity Educator Professional (CCEP)

Red Team Leaders

Nov 2025

Certification CCEP
Ethical Hacking for Beginners

Ethical Hacking for Beginners

Experts with David Bombal, Kevin Wallace Training, LLC

Mar 2022

Certification Ethical Hacking
Cyber Security Workshop

Cyber Security Workshop

IEE Computer Society IUB Student Branch Chapter

Sep 2021

Workshop
Professional Certificate in Selling Skills

Professional Certificate in Selling Skills

Yusuf Efti, ABP & Future Icon

Jun 2025

Certification Sales
Money Management

Money Management

Mohaimin Patwary, Amar iSchool

Mar 2025

Certification Finance Business Management
Certificate of Appreciation

Certificate of Appreciation

Devs Core

Dec 2022

Appreciation Award
Zad Academy Program Graduation

Zad Academy Program Graduation

International Islamic Academy Online (IIAO)

Jun 2026

Graduation Islamic Studies

Offerings

Works

E-books, tools, and software built from real practice — available to use or download.

সবার জন্য সাইবার নিরাপত্তা (Cyber Security for Everyone)

ebook

সবার জন্য সাইবার নিরাপত্তা (Cyber Security for Everyone)

A plain Bangla e-book covering how to protect oneself in the digital world.

Cybersecurity Bangla E-Book Beginner-Friendly

Trust

What Clients Say

"Vault47 stepped in with a professional and thorough approach. Their team not only resolved the issue quickly but also walked me through simple preventive measures that made a real difference. Their expertise, patience, and clear communication truly set them apart. I highly recommend them to anyone looking for reliable and knowledgeable cybersecurity support."

Anonymous Client — Software Engineer, Anonymous Healthcare Technology Company

Get in Touch

Let's Talk

For security consulting, speaking, or just a genuine question — reach out directly.

Or email directly: saifbinshahab@proton.me