Najam Ul Saqib — Co-Founder

Most security problems don’t exist because teams ignore security. 👉 They exist because security is treated as a "final gate" rather than a continuous process. 𝗜 𝘄𝗼𝗿𝗸 𝗮𝘁 𝘁𝗵𝗲 𝗶𝗻𝘁𝗲𝗿𝘀𝗲𝗰𝘁𝗶𝗼𝗻 𝗼𝗳 𝗔𝗽𝗽𝗦𝗲𝗰, 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗦𝗗𝗟𝗖. I’m the Founder of Exfiltra, where we take full ownership of your security posture so you can focus on scaling your business. We don't just hand you a PDF of vulnerabilities; we embed into your engineering workflow to fix them at the root. How we help high-growth teams Scale Securely: 🔹 Continuous DevSecOps: Moving security into CI/CD with automated SAST/DAST guardrails. 🔹 Offensive Security: Rigorous Pentesting and Vulnerability Assessments (VA) that go deeper than automated scanners. 🔹 Cloud Hardening: Zero-Trust and IAM architecture reviews for AWS, Azure, and GCP. 🔹 Architecture Design: Building security into your design and code reviews, not just SOC alerts. T͟h͟e͟ ͟E͟x͟f͟i͟l͟t͟r͟a͟ ͟S͟t͟a͟n͟d͟a͟r͟d͟: We don’t use generalist IT staff. Every engineer at Exfiltra is a highly trained specialist focused on breaking and defending modern cloud-native applications. We provide the elite oversight of a full security department without the $200k/year FTE overhead. Why most teams fail at security: • They treat AppSec as a one-time pentest instead of a lifecycle. • Cloud security is owned by “everyone” and therefore no one. • They prioritize detection-first strategies while preventable issues ship every sprint. I believe security shouldn't slow you down—it should give you the confidence to move faster. 💪 🛡️ Ready to eliminate your security debt? DM me!

Stackforce AI infers this person is a Cloud Security and Application Security expert with a focus on high-growth startups.

Location: Gujranwala, Punjab, Pakistan

Experience: 4 yrs 3 mos

Skills

Application Security
Cloud Security
Penetration Testing
Full-stack Development

Career Highlights

Founder of Exfiltra, specializing in cloud security.
Expert in embedding security into engineering workflows.
Led multiple teams in achieving SOC2 compliance.

Work Experience

Exfiltra

Founder (7 mos)

Perseus Group, Constellation Software

Senior Security Engineer (1 yr 6 mos)

Security Engineer (1 yr 4 mos)

Tecvity

Co-Founder (3 yrs)

Systems Limited

Associate Security Engineer - VAPT & Application Security (10 mos)

Tkxel

Software Engineer (7 mos)

Education

Bachelor of Science - BS at PUCIT - FCIT

F.Sc Pre Engineering at Concordia Colleges

Matriculation at St Joseph High School, Gujranwala

Najam Ul Saqib

Co-Founder

Gujranwala, Punjab, Pakistan4 yrs 3 mos experience

Key Highlights

Founder of Exfiltra, specializing in cloud security.
Expert in embedding security into engineering workflows.
Led multiple teams in achieving SOC2 compliance.

Stackforce AI infers this person is a Cloud Security and Application Security expert with a focus on high-growth startups.

Contact

Skills

Core Skills

Application SecurityCloud SecurityPenetration TestingFull-stack Development

Other Skills

Application Security ArchitectureContinuous DevSecOpsOffensive SecurityCloud HardeningArchitecture DesignVulnerability AssessmentIAMRBACSOC2 complianceDASTScrumGitTypeScriptTypeORMMicrosoft Defender

About

Experience

4 yrs 3 mos

Total Experience

1 yr 5 mos

Average Tenure

Current Experience

Exfiltra

Founder

Sep 2025 – Present · 7 mos · Tallinn, Harjumaa, Estonia · Remote

𝗠𝗼𝘁𝘁𝗼: 𝗦𝗰𝗮𝗹𝗲 𝗦𝗲𝗰𝘂𝗿𝗲𝗹𝘆!
Exfiltra provides end-to-end Security Ownership for high-growth startups and scale-ups. We believe founders should focus on product-market fit and scaling, not on managing security debt or worrying about the next breach. We don't just "consult"—we embed into your team to handle the heavy lifting of application and cloud security.
O͟u͟r͟ ͟C͟o͟r͟e͟ ͟D͟e͟l͟i͟v͟e͟r͟y͟ ͟P͟i͟l͟l͟a͟r͟s͟:͟
𝘖𝘧𝘧𝘦𝘯𝘴𝘪𝘷𝘦 𝘚𝘦𝘤𝘶𝘳𝘪𝘵𝘺: Comprehensive Penetration Testing and Vulnerability Assessments (VA) to identify exploits before they hit production.
𝘐𝘯𝘧𝘳𝘢𝘴𝘵𝘳𝘶𝘤𝘵𝘶𝘳𝘦 & 𝘊𝘭𝘰𝘶𝘥 𝘏𝘢𝘳𝘥𝘦𝘯𝘪𝘯𝘨: Architectural reviews and Zero-Trust implementations across AWS, Azure, and GCP.
𝘊𝘰𝘯𝘵𝘪𝘯𝘶𝘰𝘶𝘴 𝘋𝘦𝘷𝘚𝘦𝘤𝘖𝘱𝘴: Moving security into the pipeline with automated SAST (Static Analysis) and DAST (Dynamic Analysis) guardrails.
SDLC Engineering: Building security into design, code reviews, and deployments so it’s "secure by design," not "bolted on."
The Exfiltra Standard: Our talent is not "generalist IT." Every engineer at Exfiltra is a highly trained security specialist with deep expertise in breaking and defending modern cloud-native applications. We provide the elite oversight of a full security department at a fraction of the cost of a $200k/year FTE.
🚀 𝗦𝘁𝗼𝗽 𝗿𝗲𝗮𝗰𝘁𝗶𝗻𝗴 𝘁𝗼 𝘁𝗵𝗿𝗲𝗮𝘁𝘀. 𝗦𝘁𝗮𝗿𝘁 𝘀𝗰𝗮𝗹𝗶𝗻𝗴 𝘄𝗶𝘁𝗵 𝗰𝗼𝗻𝗳𝗶𝗱𝗲𝗻𝗰𝗲!

Application Security ArchitectureContinuous DevSecOpsOffensive SecurityCloud HardeningArchitecture DesignApplication Security+1

Perseus group, constellation software

2 roles

Senior Security Engineer

Promoted

Feb 2024 – Aug 2025 · 1 yr 6 mos

Working via Contour Software at Perseus Group, Constellation Software
Established and led the VA/PT department, conducting comprehensive penetration testing and vulnerability assessments across cloud platforms, infrastructure, web apps, mobile apps, and thick clients.
Performed in-depth static and dynamic security testing using both manual techniques and automated tools.
Architected a cost-efficient SOC leveraging Wazuh for real-time monitoring of Azure-hosted production servers.
Secured multiple Azure subscriptions by deploying and managing Microsoft CSPM tools.
Directed and supervised the security team, ensuring efficient operations and continuous improvement.
Implemented robust access control measures in the cloud, utilizing IAM and RBAC to enforce a least-privilege model.
Advised stakeholders on achieving and maintaining SOC2 compliance.
Eliminated hard-coded secrets across multiple products by adopting Azure Managed Identities.
Trained and mentored team members in best practices for secure software development.

Penetration TestingVulnerability AssessmentIAMRBACSOC2 complianceCloud Security

Security Engineer

Oct 2022 – Feb 2024 · 1 yr 4 mos

Tecvity

Co-Founder

May 2022 – May 2025 · 3 yrs · On-site

At Tecvity, I led the Cybersecurity Services Department, overseeing strategy, delivery, and innovation in security offerings tailored for diverse client needs. In addition to heading cybersecurity, I played a cross-functional leadership role, managing financial planning, sales strategy, and key operational decisions to drive overall business growth.
Key achievements:
Built and scaled the cybersecurity practice from the ground up, delivering secure solutions across various industries.
Spearheaded business development efforts, contributing to revenue growth through strategic client engagements and partnerships.
Directed financial operations, ensuring fiscal responsibility and operational efficiency.
Worked closely with co-founders and senior teams to shape and execute the company’s vision and roadmap.

Systems limited

Associate Security Engineer - VAPT & Application Security

Dec 2021 – Oct 2022 · 10 mos

Conducted thorough source code reviews, both manually and using automated tools such as HCL AppScan SAST.
Performed dynamic security testing on web and mobile applications using Burp, ZAP, MobSF, Frida, Objection, and other tools.
Led technical interviews to recruit top talent for the security team at Systems Ltd.
Executed cloud security and compliance reviews in alignment with CIS benchmarks.
Managed infrastructure vulnerability assessments utilizing Tenable Nessus.
Collaborated with stakeholders to interpret security reports and drive the remediation of identified issues.

Application SecurityDAST

Tkxel

Software Engineer

May 2021 – Dec 2021 · 7 mos · Lahore, Punjab, Pakistan

Developed a full-stack marketplace application with ReactJS on the frontend and ExpressJS on the backend.
Implemented a microservices architecture on the AWS platform, leveraging services such as S3, EC2, SES, and Aurora.
Designed and deployed a custom notification service in NodeJS utilizing Amazon SES.
Trained team members on secure coding practices in ReactJS.

ScrumGitFull-Stack Development