Hamza Imran

Hamza Imran

AI engineer and cybersecurity student I study at Air University in Karachi and build voice and LLM apps. In 2026 one reached the top 10 at the USAII Global AI Hackathon and another placed 2nd in a partner track at lablab.ai.

About

I'm studying cyber security at Air University in Karachi. Most of what I know about building software comes from hackathons and internships. In 2026 I built voice and LLM apps for competitions run by USAII, lablab.ai, OpenAI and UNESCO, spent the summer as a machine learning intern at FlyRank AI, and sent bug fixes to litellm and elizaOS. I'm now a community manager intern at lablab.ai.

Security is the part of AI engineering I want to work in. When a model's output decides something, I add a check in code that the model can't override. In BISP Benefits Navigator a rules engine makes the eligibility call, and in codexfoundry a code change from Codex needs a person's approval and a separate verifier before it counts. I'm on the Blue Team at the AU Cybersecurity Society.

Projects

codexfoundry

Built solo OpenAI Build Week, July 2026

A local tool that runs Codex, OpenAI's coding agent, inside a gated loop. A planner first writes a plan, and nothing runs until a person approves it. The code change then happens in a disposable git worktree pinned to a known commit, and a separate verifier has to confirm the fix before the result is written back to the project's notes.

The recorded reference run fixes a checkout bug that charged customers twice. The repo has 79 tests.

Architecture

  1. Project memory Markdown notes vault
  2. Plan Planner prompt
  3. Plan approval A person, required
  4. Code change Codex in a disposable git worktree
  5. Verification Independent verifier
  6. Write-back Approved notes to the vault

BISP Benefits Navigator

Top 10 finalist, built solo USAII Global AI Hackathon 2026

A voice-based pre-screening tool for Pakistan's Benazir Income Support Programme. Applicants describe their household in Urdu and hear an eligibility estimate read back to them.

Gemini only pulls income, family size and assets out of the conversation. A separate TypeScript rules engine turns them into an estimated Proxy Means Test score, so the model can't change the outcome. The score is a mock estimate for the prototype, not the government's formula. The project ranked 9th of 424 teams in the qualifiers with 96 out of 100, and scored 66.5 out of 70 in the final.

“BISP Benefits Navigator removes literacy, language, and access barriers that prevent vulnerable families from accessing critical public support.”
Final-round judge, USAII Global AI Hackathon 2026

Architecture

  1. Voice input Browser audio
  2. Transcription Deepgram Nova-3, Urdu
  3. Field extraction Gemini 2.5 Flash
  4. Eligibility estimate TypeScript rules engine
  5. Spoken response ElevenLabs

OmniSight

2nd place, Speechmatics track lablab.ai Web Data UNLOCKED, May 2026

A competitor-research dashboard. You enter a company name and, if you have one, an audio clip. It runs web searches and a page scrape through Bright Data, transcribes the audio with Speechmatics, and has an LLM write the findings up as a battlecard.

It placed 2nd in the Speechmatics partner track. The hackathon had 2,310 participants.

Architecture

  1. Input Company name, optional audio
  2. Web search and scrape Bright Data SERP and Web Unlocker
  3. Transcription with speaker labels Speechmatics
  4. Battlecard Llama 3.3 70B on Groq, or Gemini
  5. Server Python standard library
  6. Dashboard Chart.js

Zero-Trust Swarm Protocol

Built solo Prototype, May to Aug 2026

A Go prototype for AI agents that have to prove who they are to each other. A small identity provider gives each agent a certificate that lasts one hour and carries a SPIFFE-style ID. Agents then talk over mutual TLS 1.3, a policy engine decides which agent may call which, and messages are signed.

The identity provider doesn't yet check who is asking for a certificate. The fix, which binds each certificate to a known agent, is in an open pull request.

Architecture

  1. Agent identity SPIFFE-style URI
  2. Certificate ECDSA P-256, valid one hour
  3. Transport Mutual TLS 1.3
  4. Authorization Policy engine
  5. Message integrity Payload signatures

Smaller projects

Team lead

VeriVoice

UNESCO Youth Hackathon 2026

A fact-checker for health and climate rumours that arrive as voice notes. It checks claims against sources such as WHO, CDC, NASA, IPCC and UNESCO and answers aloud in Urdu, English, Spanish or Indonesian, as a web app and a Discord bot. I led a team of six from Pakistan, Mexico and Indonesia. The event had 2,200 submissions from 129 countries.

Built solo

LifecycleZero

H0: Hack the Zero Stack, Vercel v0 and AWS Databases

A console for spotting risky local AI processes on company machines. Endpoints send HMAC-signed telemetry to a Next.js app backed by DynamoDB, and an admin can isolate a host in one click. The endpoint file and network events in the demo are simulated.

Built solo

OmniFlow AI

Google Cloud Rapid Agent Hackathon

A venue-operations demo. When the simulated crowd data shows a problem, it pulls context from MongoDB, Elasticsearch and GitLab through MCP, asks Gemini for a plan to reroute people, and shows the plan to an operator to approve.

Live app

Aegis-QA

IBM Bob Hackathon, May 2026

Paste a Python function and it asks IBM Granite on watsonx.ai for a PyTest suite and a security review, both downloadable. The review is the model's output, not a static analysis, so a person still has to check it.

Playable online

The Last Signal

Browser game

A survival-horror game for the browser. An enemy hunts the player across a station map using A* pathfinding, with graphics drawn on Canvas 2D and sound made with Web Audio.

Team entry

Local-first LLM agent

AMD Developer Hackathon 2026

A batch agent for a machine with no GPU, 2 vCPUs and 4 GB of RAM. Each task goes first to a 4-bit Qwen 2.5 3B model on the CPU. If the answer fails a check for its task type, the agent asks a Fireworks-hosted model instead.

Built in 120 minutes

Asal ya Nakli

GDG Live Pakistan, Chai & Code

A medicine checker that compares medicine names against sample DRAP and WHO lists in the browser. Reading packaging photos doesn't work yet.

In daily use

Google Classroom sync

Personal tool

Every 15 minutes this Apps Script copies coursework from my university and personal Google Classroom accounts into one Drive folder and a Sheets deadline tracker.

Experience

Work and education

Aug 2026 to present

Community Manager Intern, lablab.ai

  • lablab.ai runs free online AI hackathons for a global developer community. I moderate its Discord server, where participants come for help during events.
  • During hackathons I answer participants' questions, help with certificate requests and mentor teams while they build.
  • I write articles for lablab.ai, including the hackathon success-stories series and the weekly AI recap.

Jun to Sep 2026

ML Engineering Intern, FlyRank AI

  • Built a model on FlyRank's starter template that ranks 30,000 pseudonymized URLs from 32 clients by how likely their content is to lose search traffic.
  • Split training and test data by client after finding that a random split let the model memorize clients. On 7 clients it never saw, a Random Forest reached 0.70 Precision@50 against 0.40 for the hand-written rule, and a HistGradientBoosting model reached 0.72.
  • Delivered a ranked refresh queue with a reason code for each page, CI smoke tests and a public write-up.

Mar 2026 to Dec 2029 (expected)

BS Cyber Security, Air University, Karachi

  • Coursework in computer networks, information assurance, and computer organization and assembly language.
  • Blue Team member, AU Cybersecurity Society, 2026 to 2027.

Awards

May 2026

2nd place, Speechmatics partner track

lablab.ai Web Data UNLOCKED, with OmniSight

Jun 2026

Top 10 finalist, undergraduate track

USAII Global AI Hackathon, with BISP Benefits Navigator and a 25% certification scholarship

Jun 2026

Silver tier

AI Seekho Google Antigravity Hackathon, Google for Developers

Open source

Skills

Languages
Python, TypeScript, Go, C++, SQL, Bash
AI and agents
LangGraph, Model Context Protocol, Gemini API, Codex CLI, multi-agent systems, local models with llama.cpp
Security
mutual TLS and SPIFFE-style identity, HMAC request signing, OWASP Top 10, Semgrep
Machine learning
Random Forest, gradient boosting, ranking metrics, validation on held-out clients
Web and backend
Next.js, React, Node.js, Express, FastAPI, DynamoDB, MongoDB, Supabase
Infrastructure
Docker, Google Cloud Run, AWS (SQS, ECS), Vercel, GitHub Actions
Automation
Apps Script with the Classroom, Drive, Gmail and Sheets APIs, webhooks

Google, 2026: AI Fundamentals, Introduction to Generative AI, Large Language Models, AI Agents and Responsible AI, plus skill badges in Prompt Design in Vertex AI and Build a Website on Google Cloud.

Contact

I'm looking for internships and freelance work in AI engineering and application security. Email is the quickest way to reach me.