Software Engineer & Security Researcher

Open Source Contributor • AI Builder

Building backend systems, local AI tools, security-focused software, and practical security tooling, with published vulnerability research and upstream open-source contributions.

Portfolio | Security Research | Open Source | LinkedIn

Based in Pakistan.

I build Python backend systems, APIs, and local-first AI tools with a practical security engineering focus. My core work spans Django, Django REST Framework, FastAPI, API development, local AI systems, and security automation. I also research framework and application-security issues, write technical analysis, and contribute bug fixes to mature open-source projects. The portfolio is the canonical hub for project writeups, research notes, and contribution history.

• Severity: Moderate
• Reporter: Zain Nadeem (zainnadeem786)
• DRF request.data parsing could bypass Django's configured DATA_UPLOAD_MAX_MEMORY_SIZE protection for JSON and URL-encoded request bodies.
• Official advisory | Read technical analysis

• Severity: Moderate
• Reporter: Zain Nadeem (zainnadeem786)
• AdminRenderer could disclose GET-protected data while rendering invalid write requests in specific permission and renderer configurations.
• Official advisory | Read technical analysis

• Severity: Moderate
• Reporter: Zain Nadeem (zainnadeem786)
• CyberChef's pretty-recipe parser could be forced into client-side CPU exhaustion through malformed #recipe= URL fragments.
• Official advisory | Read technical analysis

Selected public work with evidence:

View all contributions

Privacy-first local secure code review platform for repository and ZIP scanning, Semgrep, Bandit, custom checks, context-aware finding reduction, local Ollama/Mistral analysis, and professional reporting.

Project page

SOC investigation and log-analysis platform for log ingestion, detections, attack campaign correlation, risk scoring, timelines, cases, live ingestion, and local AI analyst context.

Project page

Portable local AI knowledge and engineering workstation for RAG, repository intelligence, trusted research, local security scanning, agentic coding, human approval, and Ollama-based workflows.

Project page

Status: Under Development

Secure local organizational intelligence platform for private document retrieval, grounded assistance, meeting workflows, tenancy, ChromaDB retrieval, and Ollama-based local AI.

Project page

Status: Completed

Local-AI powered interview preparation and assessment platform using Django, Django REST Framework, FastAPI, Ollama, resume analysis, structured assessment, and gamified practice.

Project page

Python | Django | Django REST Framework | FastAPI | PostgreSQL | Redis | Celery

Ollama | Local LLMs | RAG | ChromaDB | Agentic Workflows

Application Security | API Security | Secure Code Review | Vulnerability Research | Security Automation | Log Analysis

Docker | Linux | Git | GitHub Actions | Nginx

July 2025 - Present

• Build secure backend applications, APIs, internal tooling, and automation workflows.
• Conduct vulnerability assessments and security reviews.
• Integrate AI-assisted features into application workflows.

Jan 2025 - Mar 2025

• Led Django application development and REST API implementation.
• Improved backend architecture and database performance for HRMS and automation workflows.

Oct 2023 - Jan 2025

• Built Django and JavaScript applications, including AI-powered product features.
• Improved API performance and collaborated across product and engineering workflows.

• Python Django Development - Azad Chaiwala Institute
• Master in ChatGPT - UNIATHENA
• Prompt Engineering - Udemy

• Portfolio: zainnadeem786.github.io
• Security Research: zainnadeem786.github.io/research.html
• Open Source: zainnadeem786.github.io/open-source.html
• LinkedIn: linkedin.com/in/zain-nadeem786
• Email: zainnadeemzainnadeem80@gmail.com
• GitHub: github.com/zainnadeem786