Experience

Applied security and systems work with national institutions — the practical counterpart to my research.

The work below is applied security and systems practice carried out with national institutions in Bangladesh and other organisations. It is the practical counterpart to my research: assessing, investigating, building, and operating systems that are in production use.

Security assessment and incident response

Security assessment — National XI-Class College Admission Platform

Government of Bangladesh

  • Ran the application security assessment of the national admission portal. Identified and fixed multiple exploitable vulnerabilities before the intake window opened.
  • Carried out database performance and load testing to validate the system under peak national concurrency. Debugged and resolved system-critical production bugs.

Tools: Kali Linux, OWASP ZAP, Burp Suite, Acunetix, Nessus, Nmap, Apache JMeter, MS SQL Server

Security testing — a-Challan, National Payment System

Government of Bangladesh

  • Security testing of a national payment and revenue-collection system. Assessed authentication, authorization, and transaction-integrity controls, and reported findings for remediation.

Security testing — ICMAB Electronic Voting Platform

Institute of Cost and Management Accountants of Bangladesh

  • Security testing of an online voting platform, covering access control, ballot integrity, and resistance to vote manipulation.

Incident response — RAJUK Hacking Incident

Capital Development Authority, Government of Bangladesh

  • Investigated a compromise of a government agency. Analyzed system and server logs to reconstruct the attack chain and establish root cause.
  • Replicated the incident in a controlled environment to confirm the vector, then delivered hardening recommendations.

Tools: Linux, Apache, forensic log analysis

Systems built and operated

Kobul.net

Founder and sole engineer · kobul.net

Bilingual (Bangla/English) matrimony platform, web and Android.

  • Built, deployed, and operate a production platform serving roughly 20,000 users per week, across architecture, backend, frontend, database, infrastructure, and release.
  • Deployment and operations: Docker, Nginx, HAProxy on Linux. Responsible for uptime, load balancing, capacity, and the platform’s security posture.
  • Companion Android application published to the Google Play Store.

Stack: Next.js, React, Node.js, REST APIs, MongoDB, Docker, Nginx, HAProxy

National Examination OMR Data-Extraction Pipeline

MBBS, Nursing, Madrasah Board National Exams; Dhaka Central University; NRTCA; DMTCL

  • Built the OMR image-processing and data-extraction pipeline used for national medical, nursing, board, and public-sector examinations. 100% extraction accuracy across deployments.
  • Integrated with MS SQL Server and the IEIMS examination system.

Stack: Python, OpenCV, MS SQL Server

Dhaka Central University Admission Site

Deployment

  • Deployed a Node.js application served behind Nginx with PM2 process management on Linux.

Freelance Programmer — Hassan Samee Lab, Baylor College of Medicine

Nov 2022 – Feb 2023 · Remote

  • Built bioinformatics analysis pipelines in R.