Abdullah Siddique

Our CORE (Creating Outstanding Results Everyday) Award recognizes team members excelling in their roles and aligning with our organization's mission and values. December's CORE Award winner is Abdullah Siddique! Sid leads efforts in using AI to support our team and enhance the learning experience. Additionally, Sid shows great promise as a live instructor, capable of leading multiple PEN-200 modules. Sid, your positive can-do attitude is infectious, and you are a key part of the Student Mentoring team at OffSec. You are CORE. Thank you!

AI governance consultancy helping Canadian SMEs move from unmanaged AI experimentation to secure, auditable, sovereignty-aligned adoption. Architected and built the AI Governance Audit Framework: 65 controls across 8 domains (governance, privacy, cybersecurity, vendor risk, sovereignty, operational risk, workforce readiness, transparency) held in a single YAML spine that both the auditor document kit and the Python scoring CLI render from, so controls are never defined twice. The scoring engine computes a 0–100 AI Governance Maturity Score with configurable domain weights and bands, a per-domain heatmap, a data-driven top-10 remediation list, and a styled PDF report. Also built an ephemeral client-stack sandbox — mock inbox and CRM seeded with synthetic-only data running a customer-triage agent through a single injected gateway chokepoint with per-step tracing and enforced import boundaries — that proves out an AI workflow in isolation, then purges on teardown and logs the purge itself as audit evidence for the deletion-on-request controls. Python 3.11 on uv, WeasyPrint reporting, nine pytest suites covering schema, scoring, templates, and sandbox end-to-end.

Independent AI engineering consultancy. Lead client engagement: Monetate's Monet AI platform — a LangGraph supervisor agent orchestrating three specialist peers via Command-based handoffs: a knowledge agent doing RAG over MongoDB, an experience-creation agent with a human-in-the-loop approval workflow, and a Wren-backed natural-language-to-SQL insights agent. Designed JWT authentication (Supabase custom access tokens) with JWT feature-flag gating that controls which capabilities each Monet client has. Built and shipped the Monet platform, streaming Monetate and research data to a Next.js chat frontend with Supabase auth, streaming responses, and thread management, plus a typed Python client library for the Monetate Experience API and a LangSmith evaluation harness with regression test suites over curated cases. Python monorepo on uv with ruff, mypy, and pre-commit enforcement.

Runtime data-loss-prevention (DLP) platform securing data in motion through SaaS and AI systems. Contributed to the NLP detection engine that identifies and classifies sensitive data — PII, credentials, and regulated content — improved automated remediation pipelines, and led SaaS integrations that brought new platforms under DLP coverage.

AI engineering across OffSec's NestJS microservice platform. Built the Recommendations service: a LangGraph state machine that turns natural-language queries into team training plans by pulling account coverage through an MCP tool server, running LLM gap analysis against MITRE ATT&CK categories, and assigning labs — behind a defense-in-depth authorization model that re-validates AI-extracted entities after extraction and account-scopes every cache key. Built the AI Gateway: a NestJS service exposing LangGraph-SDK-compatible threads, runs, and assistants endpoints that hosts the KAI tutoring graph with Prisma-backed checkpointing. Extended the Reports service with LLM-powered leaderboard analysis and a conversational admin subagent over Kafka, S3, and a data-lake Postgres. Shipped features across assessments, auth, engagement, content, and labs services. Also built a Slack agent that answers plain-English questions against production MySQL with read-only SQL generation, chart rendering, and full query audit logging.

Supported OSCP, OSEP, OSED, OSMR, OSEE, OSDA, and OSWA exam candidates in a live production environment. Led the OffSec AI initiative from prototype to product, designing KAI and OSCAR. Conducted QA testing and maintained course modules and labs. Built and maintained production Discord bots (Discord.js, Discord.py) and automated exploitation frameworks used to validate exam infrastructure end to end.

Capital market data dissemination, index creation and maintenance, market analysis and investor report generation, and research on financial securities and products.