Web & API pentesting · cloud security · ML vulnerability research · production SaaS. Experience @ FSeC — enterprise & government engagements across MY / AU.
→ View full exhibition — experience, credentials, and project deep-dives live there.
▸ Full stack breakdown
| Domain | Skills |
|---|---|
| Cybersecurity | Network & cloud pentesting · Web/API security · Linux admin · AI security |
| OS | Ubuntu · Kali · Red Hat · Windows |
| Languages | Python · C/C++ · Java · JavaScript · x86 Assembly · Bash |
| Cloud | AWS SAA · Serverless · EC2 / Lambda · RDS · DynamoDB · Redshift |
| AI / ML | SageMaker · Bedrock · RAG · DAPT · fine-tuning · ML pipelines |
| Web | React · TypeScript · Tailwind · Node.js · Cloudflare · Supabase · CI/CD |
| Design | Photoshop · Illustrator · Premiere Pro · After Effects · Figma |
- Honours FYP — Vulnera: ML pipeline for zero-day vulnerability risk estimation in C/C++
- Shipping LeadBondhu AI — production SaaS with Gemini + Meta Messenger integration
- Researching inter-procedural vulnerability composition beyond function-level ML detectors
| Project | Description | Link | |
|---|---|---|---|
| 🛡️ | Vulnera | Trained Trees on embeddings from GraphCodeBERT on ~120K C/C++ functions · temporal calibration pipeline | Portfolio |
| 🤖 | LeadBondhu AI | AI lead capture for Bangladeshi SMBs · Bangla / Banglish / English · Cloudflare + Supabase | Live |
| 📎 | Joblicator | An AI powered Job Application Applying tool that speeds up the preparation of tailored CV and Job letter | Portfolio |
End of teaser · mahirhacks.github.io/MHACKS · 2026
