Ashfaaq Farzaan
Illustrated portrait of Ashfaaq Farzaan

I’m Ashfaaq Farzaan, an AI Engineer at Priam Cyber AI in London, where I build the agentic systems behind AVA: RAG pipelines and fine-tuned LLMs that help security teams triage alerts the way a senior analyst would, then get sharper with every case they see.

I came to AI through security rather than the other way round: an MSc in Cyber Security & Forensics (Distinction, University of Westminster), a support-engineering role where I ran the malware scans myself, and a habit of building the tooling I wished existed. That habit produced Console IR, a terminal-first incident console over OCSF events, and Awesome GenAI CyberHub, the most-starred thing I maintain.

The research thread runs alongside. My IEEE paper on AI-driven incident detection in cloud environments came out of the same problem, too many alerts and too few analysts, and my current work on predicting an adversary’s next ATT&CK techniques and on how data structure changes what an LLM can reason about follows from it.

The thing I keep coming back to is measurement: we’re deploying AI into security operations faster than we can tell whether it works. That’s where I want to spend the next few years, building the benchmarks and evaluation methods the field is missing.

πŸ› οΈ Skills & Tools

Each one links to the projects that use it.

πŸ’Ό Experience

  1. July 2024 – Present

    AI Engineer

    Priam Cyber AILondon, UK

    Designed and built AI-driven systems using RAG pipelines and fine-tuned LLMs to help security teams detect and respond to threats faster, while continuously improving model performance through real-world feedback and testing.

  2. Jun 2026 – Present

    Visiting Supervisor

    Informatics Institute of Technology (IIT)Colombo, LK

    Supervise undergraduate research projects in AI and cyber security, providing technical guidance on research methodology, implementation and evaluation. Current projects cover AI-driven detection engineering for cloud environments and LLM-based frameworks for identifying and measuring evasion vulnerabilities in knowledge-graph investigative systems.

  3. Dec 2018 – Aug 2019 & Feb 2022 – Dec 2022

    Qualified Maths Tutor

    Third Space GlobalColombo, LK

    Delivered personalised online tutoring to improve students' mathematical performance through tailored lesson plans and progress tracking.

  4. Nov 2020 – Sep 2021

    Associate Support Engineer

    Tech Center PlusColombo, LK

    Conducted malware scans, security audits, and system troubleshooting, boosting workstation uptime and reducing incidents significantly.

πŸŽ“ Education

  1. Jan 2023 – May 2024

    MSc Cyber Security & ForensicsDistinction

    University of WestminsterLondon, United Kingdom
  2. Jan 2018 – Dec 2021

    BSc (Hons) Information Technology

    SLIITColombo, Sri Lanka

    Specialised in Computer Systems & Network Engineering.

πŸ“œ Certifications

  • Certified in Cybersecurity (CC) ISC2Verify
  • Foundation Level Threat Intelligence Analyst arcXVerify
  • Fortinet Certified Fundamentals in Cybersecurity FortinetVerify
  • MD-100: Windows Client MicrosoftVerify
  • Blue Team Junior Analyst Security Blue Team
  • Practical Ethical Hacking TCM Security Academy

🎯 Beyond Work

When I'm not wrestling with agents, you'll find me…

  • ⚽ Watching football
  • πŸ₯Š Following the UFC
  • πŸ“š Hacking CTFs
My desk after hours: football on the TV, a UFC poster on the wall, and a laptop midway through a capture-the-flag challenge.

Interested in AI security, cyber security research, or open-source collaboration?

Get in touch