About Me
Full Stack Developer and Web Security Researcher with hands-on experience in web development, application testing, and security research. Experienced with ERP, CRM, and logistics applications, with 20+ valid vulnerabilities disclosed through bug bounty platforms and 8 vulnerabilities identified during professional training. Strong foundation in backend development, APIs, databases, and application security.
Professional Experience
Full Stack Developer Trainee - Silky Systems (June 2026 - Aug 2026)
- Performed application testing, QA, and security testing for web and mobile ERP, CRM, and logistics applications.
- Validated business logic, workflows, and access controls to identify functional and security issues.
- Identified and documented 8 security vulnerabilities with clear reproduction steps and technical findings.
- Collaborated with developers to report issues and improve application quality and security.
Web Security Researcher / Bug Hunter - Independent (February 2025 - Present)
- 20+ valid vulnerabilities responsibly disclosed through HackerOne, Bugcrowd, and Saudi Bug Bounty.
- Experience in Web & API Security, including Business Logic, IDOR/BOLA, Authentication & Authorization, and LLM Security.
Featured Projects
- AI-Powered Cybersecurity Notes Assistant: Built using Python, LangChain, ChromaDB, and OpenAI APIs with semantic search & RAG retrieval.
- E-Commerce Web Application: Developed using React, Node.js, Express, and Supabase with robust JWT authentication.
- Real-Time Chat & Voice Streaming: Discord-like communication platform engineered with Node.js, Express, and WebSockets.
Technical Skills
Backend: Node.js, Express.js, REST APIs, GraphQL, JWT
Frontend: React.js, JavaScript, HTML5, CSS3
Database: PostgreSQL, MySQL, Supabase
DevOps & AI: Docker, Nginx, Git, GitHub Actions, n8n, Python, LangChain, RAG
Security: Web/API Security, OWASP Top 10, Business Logic, IDOR/BOLA, Authentication & Authorization