Mohammed Jawed

1. 01

   Command Center

   Sales-execution CRM for real-estate teams. Live and in daily use at a Dubai brokerage. Live
2. 02

   Aqilra

   Multi-tenant publishing platform — every organization runs its own publication, with editorial workflow built in. In development
3. 03

   Mizaan

   Multi-agent LLM validation framework with human-governed memory consolidation. Sole-authored Zenodo preprint, 2026. Live
4. 04

   KavachRT

   Open-source AI red teaming — an autonomous operator attacks your AI system, adapts, and returns a reproducible security score. In development
5. 05

   ArkThor

   Threat categorization from malware C2 communication. Peer-reviewed at ICISSP 2024, Rome. Open source
6. 06

   Muneem Ji

   Self-hosted GST billing for Indian SMBs — MIT licensed, Docker-ready, light enough to run on a Raspberry Pi. Live
7. 07

   Outpost Relay

   Self-hosted email & notification delivery API — queue-backed, multi-tenant, an open-source alternative to SendGrid. In development

1. 2013 — now Vienna · UN Common System

   DevOps Leader — Platform Engineering & DevSecOps

   International Atomic Energy Agency (IAEA)

   • Built a DevSecOps platform from a near-zero baseline to 100+ deployments per day, with SAST/DAST/SCA security scanning native to CI/CD.
   • Define engineering standards adopted across product squads — branching strategies, semantic versioning, gated environment promotion (DEV → QA → UAT → Production), self-service pipeline templates — coaching squads through influence, not line management.
   • Own the complete application lifecycle (ALM) — the transition of ideas from the whiteboard, to the keyboard, to the live site, to the users — then continuous monitoring for improvement.
   • Designed and built two custom in-house platforms: the App Security Dashboard (portfolio-wide security visibility) and SGDOP (self-service DevOps platform).
   • Own Azure DevOps as a platform, end to end — the complete toolchain that keeps the organisation's value delivery reliable, continuous, timely, trusted, transparent, and secure.
   • Authored the organisation's DevOps culture and Continuous Improvement framework. IAEA Merit Award, June 2023.
2. 2025 — now Vienna · mannatai.com

   Founder & Platform Engineering Lead

   Mannat AI Labs

   • Independent research lab for AI security, cloud security, and secure platform engineering — open-source first, with explainability and human oversight at the core.
   • Architect and operate the lab's entire production platform hands-on: a WireGuard-segmented multi-VPS environment with hardened Ubuntu baselines, non-root Docker containers, Gravitee API gateway (OAuth 2.0 / JWT, rate limiting), OpenBao secrets management (vault-issued, short-lived credentials), ModSecurity WAF, Fail2ban, automated TLS, and full Prometheus–Grafana–Loki–Alertmanager observability.
   • Ships Command Center, Aqilra, Mizaan, KavachRT, ArkThor, Muneem Ji, and Outpost Relay — seven products designed, built, and operated end to end by one founder.
3. 2007 — 2013 Global finance & enterprise IT

   Release Engineering & Automation

   CLSA · Saxo Bank · Hewlett-Packard · Aditi Technologies

   • Senior Technical Lead Consultant at CLSA (trading-platform release engineering); established Saxo Bank's first Continuous Integration environment; deployment and test automation at HP and Aditi.

Aim

Make software delivery from developer hands into production reliable, predictable, visible, secure, and largely automated — with well-understood, quantifiable risk.

Motto

Measure everything. Improve every aspect of the development ecosystem — especially time to detect, time to respond, and feedback delay. Automate repeatable steps.

Policy

Set standards for transparency and predictability. Communicate clearly. State intentions publicly — and be held to them.

Strength

Agility. Speed up the transition of ideas from the whiteboard, to the keyboard, to the live site, to the users.

Mannat AI Labs ships like a full delivery organisation — because it runs one. Every role below is an AI agent: defined in code, scoped to its own tools, and held to hard gates. No build starts without an approved design; nothing is "done" without QA and security sign-off. Review roles are read-only by design — they can block a release, but can never touch source. The only human is at the top of the tree.

Mohammed Jawed Human · Founder Delivery Lead & GTM Lead — runs the ceremony, enforces the gates, signs every release

Delivery crew 15 agents

Leadership & design

• CTOStack sign-off, build-vs-buy, risk appetite
• Product OwnerBacklog, priorities, acceptance criteria
• Scrum MasterCeremonies, blockers, definition of done
• Solution ArchitectSystem design, ADRs, non-functionals
• UX DesignerFlows, states, accessibility

Build

• DeveloperImplements strictly against the approved design
• DevOps EngineerCI/CD, deploy, rollback, observability
• Data EngineerMigrations, indexing, row-level security
• AI/ML EngineerModels, RAG, evals, guardrails

Verify & govern read-only

• QA EngineerTest plans and pass/fail verdicts
• AppSec EngineerThreat models; can block "done"
• End UserUAT from a real user's point of view
• Privacy OfficerData-protection & lawful-basis review
• AuditorTraceability and the sign-off ledger
• Technical WriterDocs, API reference, release notes

Go-to-market crew 6 agents

Positioning & content

• Product MarketerPositioning, audience, core message
• Content StrategistChannel plan, calendar, SEO
• CopywriterLanding pages, email, posts
• Video CreatorScripts, hooks, shot lists

Growth & sales

• Growth MarketerCampaigns, funnels, metrics
• Sales & BDOutreach, qualification, objection handling

Built on Claude Code subagents — each role is a version-controlled definition with its own model, tool scope, and mandate. One person, org-level throughput.

• 2026

  When Disagreement Means Learning (or Bias): Human-Governed Memory Consolidation and Counterfactual Diagnosis in Multi-Agent LLM Scoring

  Zenodo preprint, June 2026 · Sole author · CC-BY-4.0

  doi:10.5281/zenodo.21025602 source code
• 2024

  ArkThor: Threat Categorization Based on Malware's C2 Communication

  ICISSP 2024, Rome · Best Position Paper Candidate · with C3i Hub, IIT Kanpur

  doi:10.5220/0012420200003648 source code
• 2019

  Continuous Security in DevOps Environment

  Master's thesis, Technische Universität Wien · Grade: Excellent

  TU Wien repository
• 2026

  MIZAAN — The Balance

  Memoir · Notion Press · Amazon, Flipkart

  book site

Education

• 2024–25

  IIT Kanpur — eMasters, Cyber Security

  Pass with Distinction

• 2022–23

  IIT Kanpur C3i Hub — Advanced Certification, Cyber Security & Cyber Defence

  A+ grade

• 2017–19

  TU Wien — MSc, Engineering Management

  Pass with Distinction · thesis graded Excellent

• 2003–07

  VTU — B.E., Electronics & Communication Engineering

  Pass with Distinction