Skip to content
AAAhtisham Ashraf
000

Experience

A decade oftechnology, securityand leadership.

A career spanning software engineering, security auditing, penetration testing, security operations, cloud infrastructure, DevSecOps and executive technology leadership.

Span
2015 — Present · 11+ years
Current
Chief Technology Officer, LuxuryProperty.com
Based in
Dubai, United Arab Emirates

LuxuryProperty.com · One continuous progression

  1. Sep 2021

    DevSecOps

  2. Jan 2023

    Head of IT

  3. Jan 2026

    Chief Technology Officer

Engineering, then the IT function, then technology as a whole — three roles at one company over four and a half years.

Professional history

January 2026Present

Dubai, United Arab Emirates

Current

Chief Technology Officer

LuxuryProperty.com

Executive responsibility for technology and digital operations, covering engineering, infrastructure, security, marketing technology and digital delivery.

Responsibilities

  • Own technology strategy and its alignment with business objectives.
  • Lead Information Technology, Software Development, Cybersecurity, Marketing, SEO, Listing Management and Digital Operations.
  • Direct architecture across the business platform, cloud infrastructure and integration layer.
  • Set security governance and technology policy across the organisation.
  • Lead AI and automation adoption inside operational workflows.
  • Manage vendor relationships, technology procurement and platform cost.
  • Structure engineering leadership and delivery processes.

Outcomes

  • Reduced technology cost while retaining organisational capability and the existing team.
  • Improved code-to-production delivery speed across engineering.
  • Sustained platform availability at 99.99%.
  • Introduced in-house AI into real business workflows through the Andrea initiative.
  • Technology Strategy
  • Engineering Leadership
  • Cloud Architecture
  • Security Governance
  • AI & Automation
  • Digital Transformation

January 2023December 2025

Dubai, United Arab Emirates

Head of IT

LuxuryProperty.com

Led the IT function: infrastructure, enterprise systems, cloud operations and organisational cybersecurity.

Responsibilities

  • Define and run IT strategy across infrastructure and enterprise systems.
  • Manage AWS estate and cloud operations.
  • Own network architecture, connectivity and business systems.
  • Lead cybersecurity across application, email and infrastructure layers.
  • Author technology policies and operating standards.
  • Lead the technology team and manage procurement.

Outcomes

  • Consolidated infrastructure into a stable, monitored cloud estate.
  • Strengthened email security and organisational security posture.
  • Established technology policy and standards across the business.
  • IT Strategy
  • Infrastructure
  • Cloud Operations
  • Cybersecurity
  • Enterprise Systems
  • Team Leadership

September 2021December 2022

Dubai, United Arab Emirates

DevSecOps

LuxuryProperty.com

Engineering and secure delivery across the CRM platform, backend services and cloud environment.

Responsibilities

  • Develop and extend the CRM platform and its backend services.
  • Optimise database queries and backend performance.
  • Operate AWS infrastructure — EC2, RDS and S3 — with security controls.
  • Build API, webhook and third-party integrations, including WhatsApp and Google services.
  • Automate operational workflows across the business platform.
  • Apply secure development practices across the delivery process.

Outcomes

  • Improved CRM backend performance through query and database optimisation.
  • Delivered messaging and lead automation through integrated APIs and webhooks.
  • Hardened application and server configuration across environments.
  • CRM Development
  • Backend Performance
  • Database Optimisation
  • Automation
  • API Integration
  • Secure Development

October 2020September 2021

United Arab Emirates

IT & Security Manager

ADS Group

Managed the IT department, on-premise infrastructure and enterprise security.

Responsibilities

  • Run the IT department and its operational services.
  • Design and maintain network architecture and firewall policy.
  • Manage on-premise infrastructure, servers and IP phone systems.
  • Define and enforce security policies across enterprise systems.

Outcomes

  • Brought network and firewall management under a defined security policy.
  • Stabilised on-premise infrastructure and enterprise system operations.
  • IT Management
  • Network Architecture
  • Firewall Management
  • Infrastructure
  • Security Policy

July 2019March 2020

Remote

Vulnerability Analyst / Penetration Tester

Octarine Security

Vulnerability analysis, penetration testing and security monitoring, with a focus on traffic and malware investigation.

Responsibilities

  • Perform vulnerability analysis and penetration testing engagements.
  • Analyse network traffic and monitor for suspicious activity using Snort.
  • Investigate malware samples and document behaviour.
  • Contribute to security research and threat identification.

Outcomes

  • Delivered vulnerability findings and remediation guidance to engineering teams.
  • Penetration Testing
  • Vulnerability Analysis
  • Malware Analysis
  • Traffic Analysis
  • Security Monitoring

January 2019July 2019

Remote

Security Auditor

Quake Mining

Security assessment across a fintech and cryptocurrency platform — web, API, mobile and cloud.

Responsibilities

  • Assess web application, API and mobile application security.
  • Review application architecture for security weaknesses.
  • Advise on cloud hardening and platform security controls.

Outcomes

  • Identified vulnerabilities across the web, API and mobile surfaces and advised on remediation.
  • Contributed cloud hardening recommendations to the platform team.
  • Fintech Security
  • API Security
  • Mobile Security
  • Cloud Hardening
  • Security Consulting

January 2018December 2018

Pakistan

SecOps

BlueEast

Security operations across an IoT product ecosystem, spanning cloud, mobile and application layers.

Responsibilities

  • Secure AWS environments supporting IoT services.
  • Review application and mobile code for security issues.
  • Contribute to secure communication design across devices and services.
  • Work alongside engineering teams on secure application development.

Outcomes

  • Embedded security review into the product engineering workflow.
  • AWS Security
  • IoT Architecture
  • Mobile Security
  • Secure Code Review
  • Secure Development

March 2017January 2018

Remote

Security Auditor

FundFantasy

Security audit of a blockchain-based platform, covering the web application, peer-to-peer layer, infrastructure and codebase.

Responsibilities

  • Audit the web application and peer-to-peer system for security defects.
  • Review the codebase for insecure patterns and design weaknesses.
  • Advise on infrastructure hardening and encrypted communications.

Outcomes

  • Identified more than 40 critical vulnerabilities during the security engagement.

40+Critical vulnerabilities identified

  • Blockchain Security
  • Application Security
  • Secure Code Review
  • Infrastructure Hardening
  • Security Auditing

March 2015March 2017

Pakistan

Web Developer & Cybersecurity Engineer

Zen of Ruby

Full-stack web development alongside server and application security work in VPN-restricted environments.

Responsibilities

  • Build web applications across the front and back end using PHP and React.
  • Design and maintain web architecture and server configuration.
  • Implement security policies for VPN-restricted development environments.
  • Apply secure development practices across delivered applications.

Outcomes

  • Delivered production web applications end to end, from architecture through deployment.
  • Full-Stack Development
  • Web Architecture
  • Server Security
  • Secure Development

Independent work

2015Present

Remote

Cyber Security Engineer & Full Stack Developer

Independent

Ongoing independent engagements alongside full-time roles — security audits, application development and cloud work.

Responsibilities

  • Perform security audits and web application security assessments.
  • Advise on cloud setup, AWS configuration and disaster recovery.
  • Build applications across PHP, Python and JavaScript stacks.
  • Configure network firewalls and secure infrastructure.
  • Security Consulting
  • Ethical Hacking
  • OWASP Top 10
  • Cloud Setup
  • Disaster Recovery
  • Digital Forensics

Education

Virtual University of Pakistan

Bachelor of Science, Software Engineering

Trajectory

  1. 2015

    Software Engineering + Cybersecurity

    Close to the code — web applications, servers, secure development.

  2. 2017

    Security Auditing

    Reading systems the way an attacker reads them.

  3. 2018

    SecOps

    Security operations across cloud, mobile and IoT services.

  4. 2019

    Penetration Testing

    Vulnerability analysis, traffic analysis, malware investigation.

  5. 2020

    IT & Security Management

    Networks, firewalls and enterprise infrastructure under one policy.

  6. 2021

    DevSecOps

    Security folded into delivery instead of placed in front of it.

  7. 2023

    Head of IT

    Cloud estate, enterprise systems and organisational security.

  8. 2026

    Chief Technology Officer

    Technology, engineering, security and digital operations.