General résumé
Start here. For software, backend and security internships, and for any role that spans more than one of them.
- Software Engineer Intern at VisionRise: a white-label LMS shipped as two Google Play apps
- Security Engineer Intern at R.U.D.R.A: VAPT, custom Semgrep and Nuclei tooling
- $1,500 Meta bug bounty; vulnerabilities reported to MSRC and CERT-In
By role
- Security · AppSec / product security
Application Security Engineer
Application security, product security and security-engineering roles at product companies.
- Built a custom Semgrep (SAST) module and Nuclei templates during a security internship
- Found 2 high-severity flaws (LFI, broken access control) in a banking portal by code review
- Builds the secure side too: encrypted HLS, HMAC-verified webhooks, RBAC and audit logs
- Security · Offensive
Penetration Tester (VAPT)
VAPT, penetration-testing and bug-bounty triage roles at security firms and consultancies.
- Web application VAPT internship at a Mumbai offensive-security firm
- $1,500 Meta (WhatsApp) bounty; disclosures to Microsoft (MSRC) and CERT-In
- Burp Suite, Nmap, Nuclei, BBOT recon automation, Sliver C2 purple-team exercises
- Engineering · Backend / SDE
Backend Engineer
Backend, SDE and API-developer roles.
- 276-route TypeScript API on PostgreSQL behind two Google Play apps
- Maintains the college's railway-concession system for ~4,000 students
- Clinic-booking prototype designed with a 3-person team: HLD, LLD and 19 ADRs
- Engineering · DevOps / DevSecOps
DevOps Engineer
DevOps, SRE, platform and DevSecOps roles.
- Hardened and ran a production Ubuntu server: Coolify CI/CD, PostgreSQL, GCS backups
- Self-hosted mail for ~250 ACM members on Mailcow with SPF, DKIM and DMARC
- Led ransomware incident response and recovery for a 16,000+ user platform
- Engineering · Full-stack / SWE
Full-Stack Engineer
SDE, full-stack and product-engineering roles, including campus placement drives.
- One React Native/Expo codebase shipped as two branded Google Play apps
- Live-auction and scoring platform used at a ~200-player pickleball tournament
- A database storage engine written from scratch in Java, with its own B-Tree index
Long form
- Full work record
Portfolio
The long version: roles, projects and security research in more depth, for interviews and anyone who wants the detail.
- Experience and selected projects with their stack, ownership and how they work
- Security research, leadership, and every skill listed with the evidence behind it
Hiring for something these don't cover, or need a different format? Write to career@jkartik.in. For freelance work, see how to hire me. The longer story is on projects and security research.