full‑stack engineer & security researcher
I build products,
ship code, break things, and scale revenue.
Multi‑disciplinary engineer operating across three verticals. I take projects from idea to production — whether that means writing clean TypeScript, auditing an API for vulnerabilities, or running ad campaigns that actually convert.
what i do
Applications & Scripts
Full‑stack engineering — from internal tools to customer‑facing apps. TypeScript, Python, PostgreSQL, and cloud infrastructure.
- 12+ projects
- 3 production apps
- Open source contributor
Security Audits & Research
Finding what scanners miss — IDOR, RLS bypass, business logic flaws. Responsible disclosure, manual audits, and custom tooling.
- HackerOne contributor
- Static analysis tools
- Web3 & API audits
Marketing & Ads
Meta Ads strategy, automation, and video editing. Five years scaling campaigns across Morocco and the GCC.
- 5+ yrs Meta Ads
- 340% CTR lift
- AI‑powered automation
recent activity
Shipped LogiDash v2 — real‑time inventory dashboard for a logistics client
Disclosed IDOR vulnerability in fintech API — $2,500 bounty awarded
Scaled beauty brand Meta Ads to $30K/mo spend at 4.2x ROAS
Released open‑source CLI tool for Supabase schema diffing
Published write‑up: RLS bypass in multi‑tenant SaaS
toolkit
available for projects
get in touch →