Ahmed Naeem

I'm Nemo, a security researcher and vulnerability triager at HackenProof, My work involves investigating vulnerability reports, reproducing and assessing their validity and impact, and conducting security engagements for protocols across the Web3 ecosystem.

My background is in Web3 security. I started with smart-contract auditing, digging through Solidity code, tracing execution paths, and looking for the ways protocols can break. Today, I also work on the other side of the process: reproducing reported vulnerabilities, validating their impact, assessing severity, identifying duplicates, and deciding what deserves escalation.

That experience led me somewhere I didn't expect!

I realized that what I enjoy most isn't limited to smart contracts or Web3. It's the investigation itself: taking an incomplete signal, figuring out what actually happened, separating real threats from noise, and building enough evidence to explain why.

That's what pulled me toward SOC and DFIR.

The technologies are different, but the mindset is familiar: an alert or report comes in, you investigate it, validate the evidence, determine its impact, and decide what happens next.

So I'm building on my Web3 security experience and expanding into security operations, digital forensics, and incident response, starting from the fundamentals and working my way toward becoming a well-rounded security professional.