About
Full-Stack Founding Engineer with a track record of taking complex products from zero to production solo.
Shipped zero-dependency routing middleware with 701ns overhead, a custom Debian OS with 5 native compatibility layers, and a real-time AI security pipeline powered by MCP and Gemini.
Focused on AI system orchestration, deep-stack infrastructure, and high-performance interactive frontends.
Seeking founding or senior engineer roles at early-stage AI-native startups.
What I'm looking for
Full-stack or application security engineering roles — ideally somewhere I can do both. Interested in early-stage/startup environments where I can own problems end-to-end, from architecture to production. Open to security-focused positions (pentesting, appsec) or full-stack roles building AI-native tooling. Remote-first, but open to relocation for the right team. Especially drawn to teams working at the intersection of security and AI.
Experience
Independent Application Security Researcher
Apr 2026 – Present
Conduct black-box and gray-box security testing across web and API platforms under signed confidentiality terms, identifying and chaining vulnerabilities across authentication, authorization, and injection classes.
Identified an open, unauthenticated cloud database exposing 250K+ user records at one platform. Identified blind server-side request forgery (cloud-metadata targeting) via webhook integrations, and a NoSQL injection vulnerability enabling full dataset enumeration at another.
Author structured vulnerability assessment reports, including CVSS scoring, exploit-chain documentation, and prioritized (Critical/High/Medium) remediation guidance for engineering stakeholders. All findings reported through responsible, coordinated disclosure — no exfiltrated data retained beyond what's needed for validation.
SSRFNoSQL InjectionBlack-box TestingVulnerability ReportingCoordinated Disclosure
Multiple SaaS / Data-API Startups (YC-Backed & Venture-Funded, NDA)
Independent Security Researcher (Contract Engagement)
Jul 2026 – Aug 2026
Conducted an authorized independent security assessment of a ride-hailing platform. Identified a critical pre-authentication remote code execution vulnerability (CVE-2023-38646) in a third-party analytics component, plus a chained host misconfiguration enabling further privilege escalation — documented full impact with CVSS scoring and proof-of-concept.
Identified an authentication-bypass vulnerability permitting session issuance without credential verification, and a broken-access-control (IDOR) vulnerability exposing account profile data.
Delivered a structured vulnerability assessment report covering infrastructure mapping, exploit-chain documentation, and prioritized remediation guidance. Engagement concluded under signed confidentiality terms.
CVE ResearchExploit-Chain AnalysisCVSS ScoringPrivilege EscalationIDOR
Shor — Ride-Hailing / Mobility Platform
Contract Full-Stack Engineer
Feb 2026 – May 2026
– Owned end-to-end engineering for a production e-commerce platform — React/Vite SPA, Express/Prisma/SQLite backend, and a custom 15-surface CMS with live draft-and-publish workflow, JWT auth, and real-time Zoho CRM lead pipeline.
– Delivered product catalogue with slug-based SEO URLs, Sharp image pipeline (up to 94% size reduction via WebP), HTTP 206 video streaming, and Google Reviews carousel.
– Engineered zero-dependency bot-detection and semantic HTML rendering middleware — no Prerender.io, no Puppeteer, no cost.
Schema.org JSON-LD per page type, auto-generating Prisma-backed sitemap.xml. 117 pages indexed in Search Console within 48 hours. Subsequently open sourced as rendermw.
PrismaReactTypeScriptNode.jsExpress
Durell Flooring
Contract Frontend Engineer
Dec 2025 – Jan 2026
– Architected a high-performance, GPU-accelerated component library for an international animation studio (150+ artists, Netflix/Disney XD/BBC), delivering an editorial-grade frontend maintaining strict 60fps across complex scroll-driven animations.
– Reduced LCP by 35% through Next.js image optimisation, priority loading hints, and strategic code splitting validated via Core Web Vitals analysis.
Next.jsReactTypeScriptFramer MotionCore Web Vitals
Studio56 Animation
Education
SRM Institute of Science and Technology
B.Tech · Computer Science Engineering — AI & ML Specialisation
2027
SRM Institute of Science and Technology Chennai, India
B.Tech (Bachelor of Technology) · Computer Science Engineering
2023 – 2027
Certifications
Linux Server Programming
Southern Taiwan University
Aug 2024 – No expiry
Cyber Intelligence in Robotics
MIT SQUARE
Mar 2024 – No expiry
Skills
Prisma ORMMongoDBLinuxAWSDockerRAG PipelinesLLM APIs (OpenAI, Gemini,Model Context Protocol (MPostgreSQLNestJSNode.jsTypeScriptNext.jsReact.jsCVSS ScoringSSRFBroken Access Control (IDOWASP Top 10Burp SuiteWeb App Penetration Testi
Languages
English (Full professional proficiency)French (Elementary proficiency)
