$ cat journey.md
Developer → Security
I spent my first years building features. Now I look at them the way an attacker would - and show developers how to do the same.
- 2019 – 2023
Learning to build
B.E. in Information Technology at L.D. College of Engineering, Ahmedabad (CGPA 8.65). JavaScript, C#, databases - and my first real projects.
- Jan 2023
The developer years
Joined Argusoft as a Solution Analyst. I built a full-stack digital healthcare platform (Angular, .NET WebAPI, MySQL) with role-based access and multi-region data separation, and a Mobile Device Management system on React, .NET, PostgreSQL and gRPC.
I containerised services with Docker, put them behind a reverse proxy, wired up Prometheus and Grafana, and automated deployments with a private registry and Watchtower. I was proud of how fast we could ship.
- Aug 2024
"Are you interested in security?"
A senior on my team asked me that one question. I said yes -
not really knowing what I was saying yes to.
It turned out everything I knew as a developer was useful from the other side: I knew where shortcuts get taken, which configs nobody revisits, and which endpoints were "temporary".
- 2024 →
Learning to break
OWASP Top 10, the Web Security Testing Guide, Burp Suite, ZAP, Nmap, Nuclei, SQLmap. Then real assessments: SQL injection, XSS, CSRF, RCE, LFI, CORS misconfigurations and cache poisoning in web applications.
The part I enjoy most isn't the finding - it's sitting with the developer afterwards, explaining it in their language, and fixing it together.
- now
Building the bridge
Certified in Cybersecurity (ISC)². Working towards eJPT and OSCP. And building this site: showing developers their attack surface the way an attacker sees it - from the outside, starting with OSINT.