Hi, I'm Shubham
Backend Engineer specializing in robust APIs, secure system architectures, and data pipelines. Deep interest in building scalable fintech solutions and security automation.
SR

About

I am a backend developer focused on building secure, and high performance systems. Combining backend knowledge in NodeJS (ExpressJS), Python (Flask), and PostgreSQL with a strong background in web security (OWASP Top 10, Bug Bounty).

Experiences

Bug Bounty [HackerOne, BugCrowd, YesWeHack]
Bug Bounty [HackerOne, BugCrowd, YesWeHack]
Bug Bounty Researcher
Jan 2022 - Aug 2025
Successfully reported 30+ valid security vulnerabilities across major global platforms including IRCTC, Mozilla, Discord, Snapchat, Jotform, ClickUp, SwissPost.. etc
Government Engineering College
Government Engineering College
Guest Lecturer
19th May 2024 - 21th May 2024
Delivered technical lectures to over 100 CSE and ECE students covering the practical application of Linear Algebra in modern Cryptography and Cyber Security.
IISc Bangalore | Motor Control Lab
IISc Bangalore | Motor Control Lab
GitHubSource
Research Intern
1st April 2023 - 20th Jun 2023
Simulated a physiologically inspired model to simulate surface EMG signals and applied FastICA for motor unit decomposition, validating results against complex ground truth data systems.
Brain, Computation & Learning (BCL), IISc Bangalore
Brain, Computation & Learning (BCL), IISc Bangalore
Workshop Participant
9th Jan 2023 - 13th Jan 2023
Engaged in an interdisciplinary computational workshop exploring data-driven neuroscience applications and learning algorithms in advanced brain research.

Education

Skills

Node.js
Python
JavaScript
Typescript
PostgreSQL
Redis
BullMQ
Docker
Github
Postman
BurpSuite
file_type_nginxNginx
My Projects

Check out my latest work

I've worked on a variety of projects, from simple websites to complex web applications. Here are a few of my favorites.

GitHubSource

Banking & Ledger Engine

Engineered a secure digital wallet API featuring double entry bookkeeping, AES-256-GCM encryption, and concurrent fund transfers using pessimistic locking. Architected a vertically scalable backend utilizing dedicated Redis instances for session auth, IP-based rate limiting, and async message queues.

PostgreSQL
REDIS
NodeJS
BULLMQ
MailPit
GitHubSource

Static Vulnerability Scanner

Developed a GitHub repository scanner featuring a realtime WebSocket communication layer. Integrated Mistral locally via Ollama to automate static security analysis and find vulnerabilities in the code.

Python
React.js
WebSockets
Ollama
System Hardening Project
GitHubSource

System Hardening Project

Engineered a cross platform system hardening and automated security auditing tool. Utilized YAML based security profile matching with builtin instant automated remediation and state rollback configurations to safeguard operating system privilege matrices.

Python
YAML
POWERSHELL
GitHubSource

Brain Tumor Segmentation Application

Implemented a medical image processing platform featuring a robust Python backend and frontend. Translated complex mathematical logic from a peer-reviewed research paper to segment structural brain anomalies precisely.

Python
Flask
Image Segmentation
Research Implementation
SideProjects / Playground

I like building things

Beyond my core projects, my side projects act as a personal playground. It's where I can build random utilities to learn new technologies or tech concepts.

Connection Pooling Strategies Benchmarking

Connection Pooling Strategies Benchmarking

Designed and benchmarked four PostgreSQL connection strategies inside Docker (0.5 CPU / 512 MB): raw connections hit a hard ceiling at ~420 clients (9,121 ms, 22.80 ms/ query); app-level pooling (pg.Pool) scaled to 40,000 queries (17.2s, 0.43 ms/query); PgBouncer alone delivered 10× faster latency with zero code changes; and the combined app + PgBouncer layer achieved the lowest latency across all loads (760 ms at 400 connections, 16.8s at 40k).

GitHubSource
Rate Limiting Algorithms

Rate Limiting Algorithms

Implemented five core rate limiting algorithms: Token Bucket, Leaky Bucket, Fixed Window, Sliding Log, and Sliding Counter. And simulated a real time traffic by letting user inputs and save it to file 2 req/sec

GitHubSource
Contact

Get in Touch

Want to chat? Just shoot me a dm with a direct question on Whatsapp and I'll respond whenever I can.

GitHub
LinkedIn
Instagram
X