# Kartik Jain

> Kartik Jain is a security engineer and backend developer in Mumbai, India, who also builds websites, online stores and web apps for businesses as a freelancer. He was awarded a $1,500 bug bounty by Meta (WhatsApp), has reported vulnerabilities to Microsoft (MSRC) and the Mumbai Police (via CERT-In), and builds production backends with Node.js, TypeScript, Python and PostgreSQL. He is open to internships and to freelance work: websites and online stores, web-application security testing (VAPT), secure backend and API development, and DevOps/server hardening.

Key facts (as of October 2026):

- Name: Kartik Jain. Handles: KartikJain14 (GitHub), kartikjain1410 (LinkedIn, X, Instagram).
- Location: Mumbai, India (IST).
- Availability: open to internships and freelance work. Freelance and general contact: contact@jkartik.in. Internships, jobs and résumé requests: career@jkartik.in.
- Most recent role: Software Engineer Intern at VisionRise Technosoft (Apr 2026 – Oct 2026). Built a white-label learning platform (TypeScript/Node.js API with 276 routes, PostgreSQL, one React Native/Expo app) shipped on Google Play as two branded apps, Rise Academy and eGuru, and ran the company's production server (Ubuntu 24.04, Coolify CI/CD, automated Google Cloud Storage backups).
- Earlier: Security Engineer Intern at R.U.D.R.A Cybersecurity, Mumbai (May 2025 – Jul 2025). Found two high-severity vulnerabilities (LFI, broken access control) in a banking client's web portal, built a custom Semgrep module, and automated attack-surface monitoring with BBOT.
- Freelance client websites: online stores for KHOY and Schon Zapato (Shopify), the ELEV8 tournament platform, the AI4HCE symposium site, and more at https://jkartik.in/hire/.
- Freelance backend and security (two separate engagements, not continuous): in May – Jun 2025, led ransomware incident response and recovery for a web platform with 16,000+ users; in Aug – Oct 2026, built a live-auction and scoring platform used at a ~200-player pickleball tournament.
- Security research: $1,500 Meta (WhatsApp) bug bounty for a privilege-escalation vulnerability; vulnerabilities reported to Microsoft (MSRC), to the Mumbai Police via CERT-In, to The Souled Store and to Belgian Waffle Co.
- Leadership: Chairperson of ACM MPSTME, the ACM student chapter at NMIMS MPSTME (Jun 2026 – present). Earlier Head of Technical Department at Taqneeq, Mumbai MUN, Social Conclave and Sattva (2025–26).
- Maintains MPSTME's official Railway Concession system, used by ~4,000 students.
- Awards: first prize at the MAL 4 hackathon, judged on system architecture, at Paytm Mumbai (Nov 2026, team of 3); 1st place on the global leaderboard of chat.win's AI Jailbreakathon; 1st place at CodeForge 2026 (team).
- Education: B.Tech in Information Technology, SVKM's NMIMS Mukesh Patel School of Technology Management & Engineering (MPSTME), Mumbai, 2024 – 2028, CGPA 8.34/10.

## Hire and résumé

- [Hire Kartik Jain](https://jkartik.in/hire/): freelance websites, online stores and web apps for businesses, with 14 examples, client testimonials and how to start. Also web-app security testing, backend and API development, and DevOps
- [Résumés](https://jkartik.in/resume/): the general résumé plus role-specific versions (security, backend, DevOps, full-stack) as PDFs
- [General résumé (PDF)](https://jkartik.in/Kartik_Resume.pdf): one page, backend and security

## Proof of work

- [Security research](https://jkartik.in/research/): disclosures and defensive work, described at a safe level of detail
- [Rise Academy & eGuru](https://jkartik.in/projects/white-label-lms/): the white-label learning platform built at VisionRise Technosoft
- [GhostShare](https://jkartik.in/projects/ghostshare/): end-to-end-encrypted, zero-knowledge sharing; keys are derived in the browser and the server stores only ciphertext
- [Railway Concession](https://jkartik.in/projects/railway-concession/): MPSTME's official concession system, maintained by Kartik for ~4,000 students
- [NeuroTechh](https://jkartik.in/projects/mal-hackathon/): first-prize clinic appointment design and prototype from the MAL 4 hackathon, built by a team of 3; high-level and low-level designs, 19 decision records
- [bad-db](https://jkartik.in/projects/bad-db/): a storage engine written from scratch in Java, with a B-Tree index and its own query language
- [Fool The LLM](https://jkartik.in/projects/ftl/): a prompt-injection contest platform
- [All projects](https://jkartik.in/projects/): backends, security tooling and event systems
- [Writing](https://jkartik.in/blog/): notes on backend engineering and security research

## Profiles

- [GitHub](https://github.com/KartikJain14): code and public projects
- [LinkedIn](https://www.linkedin.com/in/kartikjain1410/): professional profile
- [X](https://x.com/kartikjain1410): updates
- [Instagram](https://www.instagram.com/kartikjain1410/): personal profile

## Optional

- [Full profile](https://jkartik.in/llms-full.txt): experience, research, projects, skills and education in one Markdown file
- [RSS feed](https://jkartik.in/rss.xml): the blog as a feed
- [security.txt](https://jkartik.in/.well-known/security.txt): how to report a vulnerability in Kartik's own systems