Looking for a job

Karem Kali

@karemkali

Full-Stack Developer and Security Consultant building client applications and APIs while testing web systems for SQL injection, XSS, and IDOR.

Iraq

Message

I build full-stack applications for clients, combining React frontends with Laravel and Ruby on Rails services. My freelance work includes REST APIs with JWT authentication and role-based access control, as well as responsive interfaces built from client requirements.

Alongside development, I test web applications and remediate issues such as SQL injection, XSS, and IDOR before production. I also prepare structured security reports and remediation plans that help non-technical stakeholders make decisions.

My open-source security work includes three patches merged into projects maintained by university laboratories, plus an accepted broken-authorization report with a remediation patch. I’ve also built security tooling for vulnerability triage and a cybersecurity training lab using physical routing hardware.

Experience

Work history, roles, and key accomplishments

Current

Freelance Full-Stack Developer & Security Consultant

Current

Self-Employed

Jan 2024 - Present (2 years 9 months)

Built full-stack web applications end-to-end, including React frontends and Laravel/Ruby on Rails backends, and delivered complete products to clients. Conducted penetration tests and vulnerability assessments, producing structured security reports and remediation plans.

React Laravel Ruby on Rails REST APIs JWT RBAC Tailwind JavaScript SQL Injection XSS IDOR Penetration Testing Vulnerability Assessment

Education

Degrees, certifications, and relevant coursework

AL-Turath University

Bachelor of Science, Cybersecurity

Activities and societies: Relevant coursework: Network Security, Ethical Hacking, Web Application Security, Operating Systems, Algorithms & Data Structures, Database Systems.

Pursuing a B.Sc. in Cybersecurity, expected to graduate in June 2027. Ranked within the top 10% of the cohort.