Aizhan Azhybaeva

Aizhan Azhybaeva is a Security and DevSecOps engineer at NomadX - the consultancy behind pentest.ae, devsecops.ae, kubernetes.ae, and related specialist practices for the UAE and GCC.

Focus

Aizhan publishes practical, field-tested guidance on:

• Penetration testing across web applications, APIs, cloud environments, AI agents, and IoT devices
• API security testing with emphasis on open banking, OWASP API Top 10, and UAE fintech regulations (CBUAE, DFSA)
• AI agent security covering prompt injection, tool poisoning, memory manipulation, and agentic red-teaming
• UAE regulatory compliance under CBUAE Article 13, DFSA, FSRA, VARA, NESA, DESC ISR v3, TDRA ISR, and PCI DSS
• DevSecOps compliance-as-code for NESA, DESC, CBUAE, and NCA ECC

Articles published under this byline are reviewed for technical accuracy by senior researchers at NomadX before publication.

Work

All published writing represents work delivered by the NomadX team, with technical review by senior engineers and regulatory review where applicable. Aizhan coordinates content across pentest.ae, devsecops.ae, kubernetes.ae, and the broader NomadX portfolio.

Topics Covered

• Penetration Testing
• API Security
• OWASP API Security Top 10
• AI Agent Security
• Prompt Injection
• LLM Red-Teaming
• CBUAE Article 13
• DFSA Penetration Testing
• FSRA Compliance
• VARA Cybersecurity
• NESA Cybersecurity Framework
• DESC ISR v3
• PCI DSS
• IoT Penetration Testing
• Cloud Penetration Testing

Profiles & Links

• https://www.linkedin.com/company/nomadx-ae
• https://github.com/nomadx-ae