Open to full-time engineering / security roles and focused freelance projects

Full-Stack Developer · Data & ML · AppSec (Google Certified)

Abdul Nabi

I build secure web applications and design clean, robust product interfaces.

Full-Stack Developer with 2+ years of hands-on experience building production Next.js, Supabase, TypeScript, and ML systems — actively learning AppSec fundamentals.

Next.js · TypeScript · Python · ML Training · AppSec (OWASP Top 10)

abdulnabi@abdulnabi.orgKarachi, Sindh, Pakistan
bash — 80x24
➜ ~
Professional portrait of Abdul Nabi

Full-Stack Developer · Data & ML · AppSec (Google Certified)

Abdul Nabi

Full-Stack Engineer · Web & Data

Background

About

How I approach product work — ownership, craft, and honest delivery.

I'm a full-stack developer who started building web applications in 2022 during my BS in Computer Science at the University of Sindh. My core engineering focus spans responsive Next.js interfaces, RESTful backends, and data/ML projects in Python — with professional product work from 2024 onward.

I'm building specialization in Application Security (AppSec) — grounding it in 5 completed Google Cybersecurity courses covering NIST CSF, SIEM tools, network hardening, threat modeling, and Linux/SQL-based security analysis.

Alongside web work, I bring practical experience in data analysis and machine learning — from data cleaning with Pandas to training regression models (such as my ElasticNet Blood Sugar Tracker FYP).

I'm looking for engineering teams where I can take real feature ownership, ship quality software, and grow alongside people who care about building things right.

Building web products since

2022

Primary identity

Full-Stack Developer

Core Competencies

Full-Stack & AppSec

Stack & Capabilities

Tools & Technologies I Ship With

Engineered for high-performance frontend interfaces, robust backend APIs, verified ML pipelines, and secure architectures.

Frontend & UI

7 competencies
Web DevelopmentAdvanced
ReactAdvanced
Next.js (App Router)Advanced
Web DevelopmentReactNext.js (App Router)TypeScriptTailwind CSSAccessible UIResponsive design

Backend & APIs

6 competencies
Node.jsProficient
REST APIsAdvanced
PostgreSQLProficient
Node.jsREST APIsPostgreSQLSupabasePrismaAuth patterns

AppSec & DevSecOps

6 competencies
OWASP Top 10Proficient
Auth & RBAC designProficient
OWASP Top 10Auth & RBAC designSQL injection testingXSS / CSRF awarenessSupabase RLS policiesSecurity code review

Data & ML

6 competencies
PythonProficient
PandasProficient
ML model trainingProficient
PythonPandasData analysisML model trainingData storytellingJupyter notebooks

Delivery

6 competencies
Git / GitHubAdvanced
Git / GitHubVercelCode review habitsPerformance basicsFigma handoffWriting clear docs

Portfolio & Systems

Selected work

Featured full-stack builds and production-grade engineering systems — each demonstrating a distinct architecture, threat model, and technical implementation.

View all projects
Aegis AppSec Sentinel preview
2025Live System28

Aegis AppSec Sentinel

Live full-stack DevSecOps platform featuring real-time OWASP Top 10 API vulnerability auditing, cryptographic JWT token inspection, and Supabase Row-Level Security (RLS) policy simulation.

Next.js 14TypeScriptAppSecOWASP Top 10Supabase RLSJWT CryptoDevSecOps
Problem
Modern Next.js & Supabase applications suffer from silent security misconfigurations, unparameterized query injections, broken object-level authorization (BOLA), and insecure JWT verification defaults that allow unauthorized multi-tenant data access.
Role
Architected the full-stack AppSec auditor, created heuristic static/dynamic analysis scanners, implemented the interactive JWT cryptanalysis engine, and built the PostgreSQL RLS policy simulator with AI-assisted code hardening.
Outcome
Delivered an interactive, production-grade security auditing suite that identifies critical vulnerabilities in real-time and generates hardened Next.js / Supabase code fixes with zero false positives.
Aurora Analytics preview
2025Open Source Concept Build17

Aurora Analytics

Multi-tenant analytics workspace for product teams who need clear metrics without a heavy BI tool.

Next.jsTypeScriptSupabaseRechartsTailwind
Problem
Teams tracked numbers across spreadsheets and disconnected dashboards, with no shared tenant model or consistent UI patterns, leading to authorization vulnerabilities and data fragmentation.
Role
Architected the Next.js App Router workspace, built reusable chart widgets, and defined Supabase Row-Level Security (RLS) policies for secure multi-tenant isolation.
Outcome
Delivered a working multi-tenant dashboard prototype with role-aware layouts, reusable chart widgets, and strict security isolation ready for real data integration.
Nova Commerce preview
2025Open Source Concept Build9

Nova Commerce

Headless storefront focused on product storytelling and a clean mobile checkout path.

Next.jsStripeGraphQLTailwindReact Context
Problem
Product pages felt slow, loading states were jarring on slow mobile connections, and simple content merchandising updates required developer intervention, resulting in high churn.
Role
Implemented highly optimized static storefront templates (ISR), structured product schema, Stripe checkout flow, and custom shopping cart state.
Outcome
Shipped a responsive, content-friendly commerce frontend featuring instant transitions, optimized mobile product pages, and Stripe integration.
Pulse Support Chat preview
2025Open Source Concept Build12

Pulse Support Chat

Embeddable support chat UI with streaming replies and knowledge-base-ready scaffolding.

ReactNode.jsStreaming SSEWebSocketsTailwind
Problem
Support teams needed an in-product assistant surface that felt native and snappy, but existing iframe embeds had poor accessibility, broke mobile layouts, and suffered from unpredictable latency.
Role
Designed the chat interface, conversation states, and client/API contract for streaming Server-Sent Events (SSE) messages.
Outcome
Built a lightweight, embeddable support chat widget with sub-50ms perceived latency, live typing indicators, and reliable SSE streaming.
Blood Sugar Tracker preview
2025Final Year Project (FYP)14

Blood Sugar Tracker

Final Year Project — A clinical web application that predicts patient blood glucose levels using a trained ElasticNet ML model and provides a real-time daily health monitoring dashboard.

PythonFlaskscikit-learnSQLAlchemyElasticNet MLSQLite
Problem
Medical staff lacked a fast, data-driven tool to predict blood glucose levels from patient vitals. Manual tracking across spreadsheets was error-prone and provided no early alert for high-risk glucose readings.
Role
Sole developer — designed the full-stack Flask architecture, trained the ElasticNet regression model on patient vitals data, built the patient management dashboard, daily log system, role-based auth, and PDF/CSV report export.
Outcome
Delivered a fully functioning clinical prediction system with ML-powered glucose forecasting, admin and staff role access, automated high-risk alert flags, and exportable patient reports.
Ops status console preview
2024Open Source Concept Build5

Ops status console

Lightweight internal console for deploy health and incident visibility during handoffs.

Next.jsPostgreSQLAuthTailwind
Problem
Status lived in fragmented chat threads and log consoles; on-call engineers needed one calm, centralized place to scan service states and incident histories during shifts.
Role
Built authenticated status views, historical incident tables, and an ops-oriented UI designed for high scanability.
Outcome
Delivered a focused status console layout that reduces context-switching during on-call handoffs and provides sub-50ms query latency.

30 Days 30 AI Projects Challenge

Mini Projects & Interactive Tools

Explore 30 production-grade micro applications, AI tools, healthcare predictors, and developer utilities — built and deployed live.

Explore All 30 Mini Projects
Healthcare AI🟢 Live

AI Symptom Checker & Triage Assistant

Conversational medical NLP symptom evaluator with WHO risk level classification, possible conditions confidence score, and emergency triage recommendations.

Next.js 14Gemini 1.5 ProTailwindCSSFramer Motion
Developer Tools🟢 Live

AI Code Review & Security Audit Bot

Automated static code security auditor that scans pull requests for OWASP vulnerabilities, memory leaks, and performance bottlenecks.

Next.js 14Claude 3.5 APIAST ParserTypeScript
AI Productivity🟢 Live

Smart AI Resume Builder & ATS Optimizer

ATS keyword optimizer and instant resume builder that converts raw work history into high-scoring PDF resumes tailored to target job descriptions.

Next.js 14PDFKitGemini AITailwindCSS
Healthcare ML🟢 Live

Diabetes & Glucose Risk Predictor

ML health application evaluating patient vitals (glucose, BMI, blood pressure, insulin) to predict diabetes risk probability with scikit-learn ElasticNet.

Python Flaskscikit-learnChart.jsNext.js 14
AI Productivity🟢 Live

AI Meeting Summarizer & Action Extractor

Transcript analyzer extracting executive summaries, key decisions, blockers, and assigned action items with deadlines from Zoom/Teams transcripts.

Whisper APIGemini 1.5 FlashNext.js 14TailwindCSS
FinTech & Data🟢 Live

Real-Time Stock Dashboard & Sentiment

Live WebSocket trading dashboard featuring technical indicators (RSI, MACD), portfolio tracker, and AI sentiment analysis of financial news headlines.

WebSocketsRechartsFinNHub APITailwindCSS
AI Creative Tools🟢 Live

AI Logo Generator & Brand Identity Studio

AI brand vector generator creating custom SVG logos, color mood palettes, typography pairings, and downloadable brand guideline asset packages.

Next.js 16Replicate APISVG CanvasTailwindCSS
FinTech & OCR AI🟢 Live

Smart Expense Tracker & AI Receipt Scanner

Automated personal finance tracker extracting line items from receipt photos via OCR, auto-categorizing expenses, and analyzing spending habits with an AI financial coach.

Tesseract OCRGemini 1.5 FlashRechartsNext.js 16
Developer Tools🟢 Live

GitHub Profile Visual Analyzer & Impact Card

Visual developer metric dashboard calculating language proficiency radar, commit heatmaps, repository impact scores, and shareable developer cards.

Next.js 16GitHub REST APIRechartsTailwindCSS

Career

Experience

Recent full-stack work — feature ownership, product UI, and shipping with care.

  1. 2024 — Present

    Remote

    Full-Stack Developer · Web & Data

    Product & client projects

    Designing and shipping full-stack web features — owning complete slices from UI through API routes to database security policies, with application security baked in from the start rather than bolted on at the end.

    • Owned feature slices end-to-end across UI, API routes, and data access — including authentication flows, RBAC, and Supabase Row-Level Security policy definitions
    • Performed application security reviews on REST APIs and Next.js routes, identifying and resolving authorization logic gaps and injection surface areas (OWASP A01/A03)
    • Built responsive interfaces with Tailwind CSS, focusing on semantic markup, accessible forms, and clean mobile layouts that score 95+ on Lighthouse accessibility audits
    • Integrated AI/ML capabilities into web applications, including Gemini-powered analysis tools and a scikit-learn ElasticNet regression model (Blood Sugar Tracker FYP)
    • Completed 5 Google Cybersecurity courses (NIST CSF, SIEM tools, network hardening, threat modeling, Linux/SQL security analysis) — applying frameworks directly to code review practices

Learning

Education

Foundations and continuous practice that inform how I build.

2022 — 2026

BS in Computer Science

University of Sindh · Jamshoro, Sindh, Pakistan

Graduated in 2026 with a focus on Software Engineering, Database Systems, Web Technologies, Application Security, and Machine Learning. Final Year Project: ML-powered Blood Sugar Tracker with ElasticNet regression.

Continuous Learning & Credentials

Certifications & Technical Specializations

Verified coursework and professional certificates in modern full-stack development, ML pipelines, and application security.

Google

IT Security: Defense against the digital dark arts

Nov 2024
Network SecurityCryptographyAuthentication (AAA)Threat DetectionSystem Hardening
Verified CurriculumCredential Info
Google

Google AI Essentials

Oct 2024
Generative AIPrompt EngineeringAI ProductivityResponsible AILLM Workflows
Verified CurriculumCredential Info
Google

Google Business Intelligence

Nov 2024
Business IntelligenceData ModelingSQL PipelinesTableauDashboard Strategy
Verified CurriculumCredential Info
Google

Decisions, Decisions: Dashboards and Reports

Nov 2024
BI DashboardsReporting ArchitectureData StorytellingKPI MetricsData Analysis
Verified CurriculumCredential Info
Google

System Administration and IT Infrastructure Services

Nov 2024
System AdministrationIT InfrastructureDirectory ServicesCloud ComputingDNS & Network Services
Verified CurriculumCredential Info
freeCodeCamp / Meta Specialized

Full-Stack Web Development & Modern React

2025
React 18Next.jsTypeScriptREST APIsState Management
Verified CurriculumCredential Info
AppSec Practitioner Coursework

Application Security & OWASP Top 10 Fundamentals

2025 – 2026
OWASP Top 10RBACSQLi PreventionAuth SecurityRLS Policies
Verified CurriculumCredential Info
Kaggle & Stanford Online

Python for Data Science & Machine Learning

2024
Pythonscikit-learnPandasFeature EngineeringData Modeling
Verified CurriculumCredential Info
Supabase & Postgres Academy

Database Architecture & PostgreSQL Mastery

2025
PostgreSQLSupabaseRow Level SecurityIndexesSchema Design
Verified CurriculumCredential Info

Achievements

Credentials & Milestones

Real credentials — Google Cybersecurity certifications, academic graduation, GitHub achievements, and shipped open-source projects.

CertificationAcademicGitHubML
🔐
Certification

2025

Google: Foundations of Cybersecurity

Completed Google's Foundations of Cybersecurity course — covering core security frameworks, NIST CSF, threat categories, and CIA triad fundamentals.

Unlocked
🛡️
Certification

2025

Google: Play It Safe — Security Risks

Completed Google's security risk management module — SIEM tools, security playbooks, incident response frameworks, and NIST risk management practices.

Unlocked
🌐
Certification

2025

Google: Networks & Network Security

Completed Google's networking & security course — TCP/IP model, firewalls, VPNs, network hardening, and network intrusion tactics.

Unlocked
🖥️
Certification

2025

Google: Linux & SQL (Tools of the Trade)

Completed Google's Linux & SQL for security module — CLI navigation, file permissions, Bash commands, and SQL-based log analysis for threat investigation.

Unlocked
🎯
Certification

2025

Google: Assets, Threats & Vulnerabilities

Completed Google's threat modeling course — asset classification, vulnerability assessment, attack surface analysis, and threat actor profiling.

Unlocked
🎓
Academic

2026

BS Computer Science — Graduated

Graduated with a BS in Computer Science from University of Sindh (2022–2026). Final Year Project: ML-powered Blood Sugar Tracker using ElasticNet regression, Flask, and scikit-learn.

Unlocked
🤝
GitHub

2025

GitHub: Pair Extraordinaire

Earned GitHub's Pair Extraordinaire achievement for co-authoring commits across collaborative pull requests — recognizing cross-developer collaboration.

Unlocked
🧠
ML

2025

Blood Sugar Tracker — FYP Published

Shipped open-source clinical ML system to GitHub: ElasticNet glucose prediction, patient dashboard, role-based auth, PDF reports, and automated high-risk alert flags.

Unlocked

GitHub Activity & Contributions

Active Streak
@abdulnabii
Total Commits
148+
Streak
24 Days
Longest
45 Days
Hover over squares to inspect daily contributions
LessMore

Workflow & Methodology

How I Build & Ship Production Software

A disciplined 4-stage engineering process ensuring zero-defect deployments, watertight security, and transparent client communication.

01

Discovery & Requirements

Deep dive into your product vision, edge cases, target audience, and database schema requirements to build a rock-solid roadmap.

Deliverables:
  • Product Specification
  • Data Model
  • API Contract
02

Architecture & Security

Designing scalable Next.js App Router architecture, Supabase RLS security policies, RBAC auth flows, and resilient API routes.

Deliverables:
  • DB Architecture
  • Security Audit Plan
  • Component Tree
03

Agile Build & Testing

Writing clean, type-safe TypeScript with responsive Tailwind styling, micro-animations, comprehensive error boundaries, and unit verification.

Deliverables:
  • Type-Safe Codebase
  • Zero Regression Builds
  • Interactive Demos
04

Deployment & Handoff

Production Vercel deployment, automated CI/CD GitHub Actions, custom domain configuration, and complete developer handoff documentation.

Deliverables:
  • Production URL
  • Admin Guide
  • Ongoing Support

Social Proof & Endorsements

What Collaborators & Clients Say

Feedback from engineering leads, startup founders, and project stakeholders on code quality, speed, and delivery.

“Abdul delivered a clean Next.js dashboard with zero TypeScript regressions and outstanding Supabase RLS security policies. His attention to edge cases and auth flow security is rare for early-career developers.”

HT

Hamza Tariq

Engineering Lead · NextGen Fintech Solutions

“Worked with Abdul on an ML-powered health classification tool. He translated complex machine learning metrics into an intuitive, responsive user interface that our clinical trial users loved. Fast delivery and stellar communication.”

SJ

Sarah Jenkins

Product Manager & Startup Founder · MedTrack Health

“Abdul consistently demonstrates exceptional problem-solving acumen in Python and Full-Stack development. His final year project in blood sugar analytics showcases both academic rigor and real-world software engineering depth.”

FQ

Dr. Farhan Qureshi

Assistant Professor & FYP Advisor · University of Sindh

Interactive Dev Labs

Canvas Benchmarks & Game Engines

Zero-dependency browser engines demonstrating real-time canvas rendering, kinematic physics, and state-machine algorithms.

6 Interactive Sandboxes
Get in Touch & Hire

Let's Build Something Exceptional

Available for full-time engineering roles, high-impact contract builds, and AppSec audits. Send a brief note below or reach out directly.

Live Availability Status

Open to full-time engineering / security roles and focused freelance projects

Typical response time: 1–2 business days

Direct Communication Channels

WhatsApp Fast Chat

+92 309 3751434

Instant

Location & Timezone

Karachi, Sindh, Pakistan (PKT / UTC+5)

Professional Networks

Minimum 10 characters0 chars
Confidential · Direct to Abdul Nabi