Breaking Things to Build Them Safer 🛡️

Full-stack builder with an attacker's mindset — I ship products, then try to break them. Ready to challenge me in a game of tic tac toe and learn more about my journey?

Software Developer

Zoepact — Jun 2026 - Present

  • Architected and migrated a live platform from a shared database to one isolated MySQL database per tenant, with a landlord database for accounts/billing and a connection-swap layer scoping every query at runtime; migrated 12 existing customers with zero data loss.
  • Owned authentication and authorization end to end: replaced a third-party identity provider with first-party auth (email/OTP signup, Google OAuth with CSRF-protected state, password reset) and a two-step admin sign-in with TOTP implemented from RFC 4226/6238, validated against all 16 published test vectors.
  • Closed 26 security findings from a full application audit, including cross-tenant data exposure (IDOR) across eight endpoints, payment-integrity gaps and unsafe file uploads; pinned each fix with a regression test in a suite of ~75 automated tests run before every deploy.

AI Trainer & Reviewer

Outlier AI (Freelance, Remote) — Jan 2025 - Mar 2026

  • Evaluated and improved LLM responses across 20+ projects: RLHF ranking, code review, mathematical reasoning, multimodal analysis and fact verification in Python and Java.
  • Promoted from attempter to reviewer; assessed 500+ model outputs for correctness, safety and instruction-following.
  • Contributed training data for AI reasoning models (Mail Valley, Blue Wizards, OTS-Coding) by rewriting incorrect responses and writing high-quality prompt-response pairs.

Web Developer & Security Auditor

MyShopAirport (Contract) — Jan 2022 - Mar 2023

  • Created a responsive e-commerce website for MyShopAirport (Jammu Airport concessionaire) serving 5+ retail outlets using HTML, CSS, JavaScript, Tailwind CSS and NodeJS.
  • Performed a post-deployment audit with Burp Suite and OWASP ZAP; found and fixed 12+ vulnerabilities including input validation flaws, missing security headers and session issues.