Hi, I'm Md Mohsin Mia(M@ruf)

Bridging the gap between scalable Software Engineering and offensive Cybersecurity.

Securing the Web,
One line at a time.

I am a results-driven Senior Software Engineer and Cybersecurity Researcher with extensive experience architecting high-availability enterprise applications (HRMS, ERP) using C#, ASP.NET Core, and React.

As a proactive security expert, I have discovered and responsibly reported over 1,000+ valid security vulnerabilities globally, earning Hall of Fame honors from industry giants like Google, Microsoft, and NASA. I am also an official HackerOne Ambassador, mentoring the next generation of ethical hackers.

1000+

Bugs Found

80

Critical Severity

4th

SUST CTF

Hall of Fame

GoogleNASAMicrosoftESETNokiaDev.toEllucianEur.nl

Certifications

  • Certified AppSec Practitioner (CAP)
  • Web Application Penetration Tester eXtreme
  • Android Forensics with Belkasoft

Technical Expertise

A balanced stack of development and security technologies.

Software Engineering

C# & ASP.NET CoreReact & React NativeSQL ServerDockerMicroservices

Cybersecurity (VAPT)

Web/Mobile SecSSRF & IDORSQLi & XSSBurp SuiteMetasploit

AI, ML & NLP

Deep LearningCNNsSentiment AnalysisPythonData Augmentation

Professional Experience

My journey in tech and security.

Senior Software Engineer

Flyinfosoft Technologies Limited | Jan 2024 - Present

Architected and maintained scalable HRMS enterprise applications and security modules using ASP.NET Core, React Native, and SQL Server. Hardened server infrastructure enforcing zero security breaches.

Security Researcher

Yogosha & Bugcrowd | Jan 2020 - Present

Conduct comprehensive vulnerability assessments and penetration tests as part of private and public bug bounty programs globally. Identified high-impact web and mobile vulnerabilities.

Software Engineer

Turtle Solutions Limited | Jun 2021 - Dec 2023

Engineered scalable full-stack software solutions for HRMS, ERP, and POS domains utilizing C#, ASP.NET Core, React, and SQL Server in alignment with Agile SDLC principles.

Cyber Security Engineer

Jobmofy | Germany (Remote) | Jan 2021 - Dec 2021

Executed rigorous Vulnerability Assessment and Penetration Testing (VAPT) across cloud infrastructure and on-premise networks to identify potential attack vectors.

Key Projects & Research

Bridging AI, Development, and Security.

Deep Learning

Bengali Handwriting Digit Detection

Developed a hybrid Convolutional Neural Network (CNN) deep learning model achieving 95.5% classification accuracy on ~50,000 BanglaLipy dataset samples. Applied data augmentation to prevent overfitting.

NLP & Data

DrugRev: Customer Reviews Dataset

Engineered an NLP dataset containing 392,510 cleaned customer reviews collected from drugs.com for natural language processing, sentiment analysis, and health informatics research.

Cybersecurity

Offensive Security Utility Tools

Engineered a custom suite of cybersecurity penetration testing tools and automation scripts to support vulnerability assessment, reconnaissance, and security auditing.

Machine Learning

Sentiment Analysis via Machine Learning

Evaluated traditional machine learning algorithms and deep learning architectures for Natural Language Processing (NLP) text classification, optimizing model accuracy.

Get In Touch

Have a project in mind, need a security audit, or just want to say hi? Drop me a message below.