At NJS CO. LTD., I served as the Application Security Engineer for a cross-border Dhaka WASA project. I tested applications manually and reviewed source code to uncover business logic and authorization vulnerabilities.
I worked with software engineers to integrate security early in development and address issues including SQL injection and access control flaws. I also architected SSH and SFTP pipelines for telemetry from IoT water quality sensors and treatment plants.
As an independent security researcher, I responsibly disclosed IDORs and authorization bypasses through bug bounty platforms. I built Python and Bash scripts for security reconnaissance, and my vulnerability reports have been rewarded by OpenAI, BMW, and Coca-Cola.
