name: Shahriar Hossain Arafat
role: Full Stack Developer + Cybersecurity Analyst
education: B.Sc. in CSE, Ahsanullah University of Science and Technology (2022 - 2026)
focus: AI native web apps, secure by design engineering, blue team operations
stack: React · Next.js · TypeScript · Node.js · PostgreSQL · Supabase · Python
security: Wazuh SIEM · Log Analysis · Detection Engineering · Network Security
shipped: 5 production deployed applications, 1 IEEE publication
currently: Building AI powered products and hunting flags on TryHackMeI build web applications end to end and I break them on purpose before someone else does. My development work runs on React, Next.js, TypeScript, and PostgreSQL with real authentication and row level security. My security work runs on Wazuh, log analysis, and custom detection rules from a hands on SOC internship. The overlap is where I like to work: shipping software that is fast to use and hard to abuse.
|
Languages Frontend Backend and Databases |
Security and Systems Tools and Platforms AI and Build 
|
| 💻 Commercial Software Development Trainee Itransition · Remote, Georgia Jun 2026 - Aug 2026 |
Built a full stack user management platform with JWT authentication and a role controlled admin panel on React, Express, and PostgreSQL. Shipped a real time multiplayer Battleship game with Socket.IO, a lobby system, and a persistent leaderboard. Delivered a CV management system, a deterministic seeded music store generator, and a BigInt based HTTP service with strict request validation. |
| 🛡️ SOC Analyst Intern Tech Hierarchy · Remote, Pakistan Mar 2026 |
Deployed and configured Wazuh SIEM in a lab environment, onboarded Windows Event Log and Linux Syslog sources, and verified end to end parsing. Wrote and tuned custom detection rules, caught simulated brute force logins through authentication log correlation, traced suspicious PowerShell execution, and designed a segmented VLAN topology to limit lateral movement. |
| 🖥️ Software Developer Intern Xcode Corporation · Remote, Bangladesh Dec 2025 - Jan 2026 |
Shipped responsive web applications from design prototype to live deployment with React, JavaScript ES6+, and HTML5/CSS3. Integrated REST endpoints alongside the backend team, built a reusable component library that accelerated later pages, and optimized frontend performance before production release. |
| Project | Stack | What It Does |
|---|---|---|
🔍 ShottoQR 🏆 Champion |
React · Supabase · AI | Forensic image verification and justice tracking platform. Won the Spirit of July track at July Hackathon 2026. |
| 🛒 SocialSeller | Next.js · Supabase · Claude API | Social commerce dashboard for Bangladeshi Facebook and WhatsApp sellers covering orders, inventory, shipping, and bKash/Nagad tracking, with AI generated bilingual product posts and customer replies. |
🧠 NeuroQuest Live 🏅 Finalist |
Next.js · Supabase · Gemini API | Bilingual adaptive learning platform for SSC, HSC, IELTS, and Medical students with diagnostic tests, personalized study paths, and spaced revision. Team Finalist at THE INFINITY AI BUILDFEST 2026. |
🌾 FarmHelper Live |
React · Tailwind · Supabase · AI | Mobile first bilingual farming companion with image based crop diagnosis, region aware profit planning, and a farmer to buyer marketplace, secured with PostgreSQL row level security. |
🏗️ PermitPilot Live |
React · TypeScript · Supabase | Compliance tracker for construction contractors managing permits, inspections, and OSHA checklists, with a one click AI risk scan that scores projects 0 to 100 and flags slipping deadlines. |
| Project | Stack | What It Does |
|---|---|---|
| 🎣 PhishGuard | TypeScript · Chrome Manifest V3 | Real time anti phishing extension that scores every visited URL against a heuristic ruleset and inspects live DOM structure to flag credential harvesting pages. Warns inline with a reason instead of blocking silently. |
| 🕵️ Top-Secret | Python · PyQt5 · Pillow · Cryptography | Desktop steganography app that hides text or images inside cover images using LSB embedding, encrypting the payload first so hidden data stays unreadable even if the carrier is recovered. |
| 🔑 Password Manager | Python · Cryptography | Local credential vault that keeps every secret encrypted on disk behind a single master password, with nothing written in plaintext at rest. |
| 📡 Port Scanner | Python · Sockets | TCP port scanner that sweeps a target host across a user defined range and reports each port as open, closed, or timed out for quick service enumeration. |
LeafVRNet: An Explainable Feature Fusion Framework for Plant Leaf Disease Detection 28th International Conference on Computer and Information Technology (ICCIT 2025), IEEE 📖 Read the paper
|
🥇 Champion, Spirit of July track July Hackathon 2026, for ShottoQR 🏅 Team Finalist, Top 100 teams THE INFINITY AI BUILDFEST 2026, for NeuroQuest 🚀 Top 100 Finalist, Individual Vibe Coding to Production Challenge, BUILDFEST 2026 📈 Globally Ranked 85, top 5% HackerRank Hackathon, August 2026 edition |
🛡️ Top 6% globally on TryHackMe 100+ hands on labs completed 🚩 Finalist, Cybernauts CTF, North South University 19th of 267 teams, the only qualifying team from AUST 🎯 Finalist, CTF at SMUCT CSE Fest v3.0 1st in the preliminary round, 7th overall ⚑ 163rd, TechnoNext Software Ltd CTF Solved 7 of 12 challenges in the online round |
|
Development
|
Cybersecurity
|
B.Sc. in Computer Science and Engineering · Ahsanullah University of Science and Technology · 2022 to 2026 Higher Secondary Certificate, Dhaka College · Secondary School Certificate, Ideal School and College
Served as Class Representative for the CSE program, acting as liaison between faculty and students, coordinating schedules, and resolving academic concerns. Organized CSE Fest, CSE Carnival, and inter department sports events, managing logistics and volunteer teams.
|
"Our greatest glory is not in never falling, but in rising every time we fall." Confucius |
"It always seems impossible until it is done." Nelson Mandela |
Open to full stack, frontend, and cybersecurity roles.
