Murtaza Amjad — Software Engineer & Cybersecurity Specialist

Who I Am

I'm a Computer Science graduate of the University of New Haven (B.S., May 2026) with a deep focus on software engineering, applied AI, and cybersecurity. I'm fascinated by the intersection of AI and security — building systems that are both intelligent and resilient.

As former President of the Computer Programming Club, I led workshops, mentored students, and ran collaborative dev projects. My professional experience spans a software engineering research role at UNH, a Cybersecurity & IT Risk internship at Webster Bank, and an Information Security Officer role at iQ4.

Experience

Feb 2026 – May 2026 Research

Software Engineering Research Assistant V & Team Lead

University of New Haven · West Haven, CT

Led full-stack development of a real-time operational dashboard (React/TypeScript, Python) for a construction client, serving live job-level cost, fabrication, and labor metrics across 20+ active projects
Built a multi-source ETL pipeline integrating Sage 100, Tekla PowerFab, and TSheets via ODBC and REST APIs, automating daily data ingestion and stakeholder reporting
Designed and proposed an RBAC system with least-privilege permissions, audit logging, and server-side API enforcement across Admin and Viewer roles

React TypeScript ETL REST APIs

May 2025 – Aug 2025 Internship

Cybersecurity & IT Risk Intern

Webster Bank · Southington, CT (Hybrid)

Managed and reviewed evidence for 15+ security issues, ensuring 100% milestone completion and audit readiness
Conducted 2+ third-party Information Security Risk Assessments and peer reviews, improving vendor security compliance scores
Created 5+ process-specific training documents, reducing onboarding time and increasing security best practice engagement

GRC NIST Framework Risk Assessment Compliance

Nov 2024 – May 2025 Research

Research Assistant — Next-Gen Autonomous Vehicle Security

University of New Haven · West Haven, CT

Simulated cybersecurity threats including sensor spoofing, data corruption, and network interception to evaluate system resilience and safety
Designed the foundation for reinforcement learning integration and documented security considerations for safer AI-enabled autonomous system design

Autonomous Systems Threat Simulation Reinforcement Learning

Jun 2024 – Aug 2024 Internship

Information Security Officer Intern

iQ4 · Remote, CT

Analyzed real-world cybersecurity challenges with expertise in GRC, SOC, and the NIST Cybersecurity Framework's five pillars: Identify, Protect, Detect, Respond, and Recover
Conducted threat modeling and incident response simulations, formulating countermeasures that reduced theoretical breach impact by 30% in case study scenarios
Produced detailed security reports and executive summaries, reinforcing adherence to cybersecurity best practices

SOC Incident Response Threat Modeling GRC

Tech Stack

Languages

Python Java C++ C C# JavaScript TypeScript Swift Kotlin SQL Bash HTML5 CSS3

Frameworks & Libraries

React Spring Boot Vue.js Express.js Node.js SwiftUI JavaFX Flask

Security Tools

Metasploit Nmap Wireshark Burp Suite VMware Cisco Packet Tracer NIST CSF MITRE ATT&CK NIST SP 800-53

Tools & Practices

AWS Docker Git / GitHub Actions Linux MongoDB Postman Figma Agile / Scrum CI/CD Unit Testing GRC / SOC Risk Assessment

Featured Projects

All projects →

Redesigning UI Full Stack

SendIt — Cross-Platform P2P File Transfer

A secure peer-to-peer file transfer system spanning iOS (SwiftUI), Android (Kotlin), and desktop (JavaFX), backed by a Spring Boot + WebSocket relay with end-to-end encryption and JWT-based auth. Core functionality is built — now undergoing a modern UI redesign ahead of launch on the Apple App Store, Google Play, and Microsoft Store.

KotlinSwiftJavaFXSpring Boot

Demo Video →

Completed Security

Ethical Hacking — Penetration Testing Lab

Exploited 9+ CVEs across 3 custom VMs (Ubuntu, Debian, Windows), achieving remote code execution and privilege escalation to root/SYSTEM using Metasploit and Python PoCs. Documented findings in a 35+ page report aligned to MITRE ATT&CK and NIST SP 800-53.

MetasploitNmapWiresharkMITRE ATT&CK

Private Report

Completed Full Stack

PokéPlatform — Full-Stack Web Platform

A deployed full-stack web application with a REST API supporting full CRUD functionality, backed by MongoDB. Endpoints manually tested and validated with Postman throughout development.

Vue.jsExpress.jsMongoDBREST API

Private Repo