Open to full-time engineering / security roles and focused freelance projects

Full-Stack Developer · Data & ML · AppSec Engineer

Abdul Nabi

I build secure web applications and design clean, robust product interfaces.

Full-Stack Developer with 2+ years of hands-on experience building production Next.js, Supabase, TypeScript, and ML systems - actively learning AppSec fundamentals.

Next.js · TypeScript · Python · ML Training · AppSec & DevSecOps

abdulnabi.khaskhely@gmail.comKarachi, Sindh, Pakistan
bash — 80x24
➜ ~
Professional portrait of Abdul Nabi

Full-Stack Developer · Data & ML · AppSec Engineer

Abdul Nabi

Full-Stack Engineer · Web & Data

Background

About

How I approach product work — ownership, craft, and honest delivery.

I'm a full-stack developer with 2+ years of experience building web applications. My core engineering focus spans responsive Next.js interfaces, RESTful backends, and data/ML projects in Python.

I specialize in Application Security (AppSec) — continuously building awareness around OWASP Top 10 guidelines, safe authentication, proper authorization, and secure coding practices.

Alongside web work, I bring practical experience in data analysis and machine learning — from data cleaning with Pandas to training regression models (such as my ElasticNet Blood Sugar Tracker FYP).

I'm looking for engineering teams where I can build quality software, expand my technical skillset, and continue learning security and full-stack best practices.

Years building web products

2+

Primary identity

Full-Stack Developer

Core Competencies

Full-Stack & AppSec

Stack & Capabilities

Tools & Technologies I Ship With

Engineered for high-performance frontend interfaces, robust backend APIs, verified ML pipelines, and secure architectures.

Frontend & UI

7 competencies
Web Development94%
React90%
Next.js (App Router)92%
Web DevelopmentReactNext.js (App Router)TypeScriptTailwind CSSAccessible UIResponsive design

Backend & APIs

6 competencies
Node.js86%
REST APIs90%
PostgreSQL84%
Node.jsREST APIsPostgreSQLSupabasePrismaAuth patterns

AppSec & DevSecOps

6 competencies
OWASP Top 1082%
Auth & RBAC design85%
OWASP Top 10Auth & RBAC designSQL injection testingXSS / CSRF awarenessSupabase RLS policiesSecurity code review

Data & ML

6 competencies
Python85%
Pandas82%
ML model training80%
PythonPandasData analysisML model trainingData storytellingJupyter notebooks

Delivery

6 competencies
Git / GitHub90%
Git / GitHubVercelCode review habitsPerformance basicsFigma handoffWriting clear docs

Portfolio & Systems

Selected work

Featured full-stack builds and production-grade engineering systems — each demonstrating a distinct architecture, threat model, and technical implementation.

View all projects
Aegis AppSec Sentinel preview
2025Live System28

Aegis AppSec Sentinel

Live full-stack DevSecOps platform featuring real-time OWASP Top 10 API vulnerability auditing, cryptographic JWT token inspection, and Supabase Row-Level Security (RLS) policy simulation.

Next.js 14TypeScriptAppSecOWASP Top 10Supabase RLSJWT Crypto
Problem
Modern Next.js & Supabase applications suffer from silent security misconfigurations, unparameterized query injections, broken object-level authorization (BOLA), and insecure JWT verification defaults that allow unauthorized multi-tenant data access.
Role
Architected the full-stack AppSec auditor, created heuristic static/dynamic analysis scanners, implemented the interactive JWT cryptanalysis engine, and built the PostgreSQL RLS policy simulator with AI-assisted code hardening.
Outcome
Delivered an interactive, production-grade security auditing suite that identifies critical vulnerabilities in real-time and generates hardened Next.js / Supabase code fixes with zero false positives.
Aurora Dashboard preview
2025Open Source Concept Build24

Aurora Dashboard

Interactive analytics suite for event telemetry, threat detection logs, and real-time visualization.

Next.jsTypeScriptSupabaseRechartsTailwind
Problem
Teams tracked numbers across spreadsheets and disconnected dashboards, with no shared tenant model or consistent UI patterns, leading to authorization vulnerabilities and data fragmentation.
Role
Architected the Next.js App Router workspace, built reusable chart widgets, and defined Supabase Row-Level Security (RLS) policies for secure multi-tenant isolation.
Outcome
Delivered a working multi-tenant dashboard prototype with role-aware layouts, reusable chart widgets, and strict security isolation ready for real data integration.
Nova Commerce preview
2025Open Source Concept Build9

Nova Commerce

Headless storefront focused on product storytelling and a clean mobile checkout path.

Next.jsStripeGraphQLTailwindReact Context
Problem
Product pages felt slow, loading states were jarring on slow mobile connections, and simple content merchandising updates required developer intervention, resulting in high churn.
Role
Implemented highly optimized static storefront templates (ISR), structured product schema, Stripe checkout flow, and custom shopping cart state.
Outcome
Shipped a responsive, content-friendly commerce frontend featuring instant transitions, optimized mobile product pages, and Stripe integration.
Pulse Chat preview
2025Open Source Concept Build18

Pulse Chat

Real-time SSE messaging platform with end-to-end payload sanitization and RBAC session security.

ReactNode.jsStreaming SSEWebSocketsTailwind
Problem
Support teams needed an in-product assistant surface that felt native and snappy, but existing iframe embeds had poor accessibility, broke mobile layouts, and suffered from unpredictable latency.
Role
Designed the chat interface, conversation states, and client/API contract for streaming Server-Sent Events (SSE) messages.
Outcome
Built a lightweight, embeddable support chat widget with sub-50ms perceived latency, live typing indicators, and reliable SSE streaming.
Blood Sugar Tracker preview
2025Final Year Project (FYP)14

Blood Sugar Tracker

Final Year Project — A clinical web application that predicts patient blood glucose levels using a trained ElasticNet ML model and provides a real-time daily health monitoring dashboard.

PythonFlaskscikit-learnSQLAlchemyElasticNet MLSQLite
Problem
Medical staff lacked a fast, data-driven tool to predict blood glucose levels from patient vitals. Manual tracking across spreadsheets was error-prone and provided no early alert for high-risk glucose readings.
Role
Sole developer — designed the full-stack Flask architecture, trained the ElasticNet regression model on patient vitals data, built the patient management dashboard, daily log system, role-based auth, and PDF/CSV report export.
Outcome
Delivered a fully functioning clinical prediction system with ML-powered glucose forecasting, admin and staff role access, automated high-risk alert flags, and exportable patient reports.
Ops status console preview
2024Open Source Concept Build5

Ops status console

Lightweight internal console for deploy health and incident visibility during handoffs.

Next.jsPostgreSQLAuthTailwind
Problem
Status lived in fragmented chat threads and log consoles; on-call engineers needed one calm, centralized place to scan service states and incident histories during shifts.
Role
Built authenticated status views, historical incident tables, and an ops-oriented UI designed for high scanability.
Outcome
Delivered a focused status console layout that reduces context-switching during on-call handoffs and provides sub-50ms query latency.

30 Days 30 AI Projects Challenge

Mini Projects & Interactive Tools

Explore 30 production-grade micro applications, AI tools, healthcare predictors, and developer utilities — built and deployed live.

Explore All 7 Mini Projects
Healthcare AI🟢 Live

AI Symptom Checker & Triage Assistant

Conversational medical NLP symptom evaluator with WHO risk level classification, possible conditions confidence score, and emergency triage recommendations.

Next.js 14Gemini 1.5 ProTailwindCSSFramer Motion
Developer Tools🟢 Live

AI Code Review & Security Audit Bot

Automated static code security auditor that scans pull requests for OWASP vulnerabilities, memory leaks, and performance bottlenecks.

Next.js 14Claude 3.5 APIAST ParserTypeScript
AI Productivity🟢 Live

Smart AI Resume Builder & ATS Optimizer

ATS keyword optimizer and instant resume builder that converts raw work history into high-scoring PDF resumes tailored to target job descriptions.

Next.js 14PDFKitGemini AITailwindCSS
Healthcare ML🟢 Live

Diabetes & Glucose Risk Predictor

ML health application evaluating patient vitals (glucose, BMI, blood pressure, insulin) to predict diabetes risk probability with scikit-learn ElasticNet.

Python Flaskscikit-learnChart.jsNext.js 14
AI Productivity🟢 Live

AI Meeting Summarizer & Action Extractor

Transcript analyzer extracting executive summaries, key decisions, blockers, and assigned action items with deadlines from Zoom/Teams transcripts.

Whisper APIGemini 1.5 FlashNext.js 14TailwindCSS
FinTech & Data🟢 Live

Real-Time Stock Dashboard & Sentiment

Live WebSocket trading dashboard featuring technical indicators (RSI, MACD), portfolio tracker, and AI sentiment analysis of financial news headlines.

WebSocketsRechartsFinNHub APITailwindCSS
AI Creative Tools🟢 Live

AI Logo Generator & Brand Identity Studio

AI brand vector generator creating custom SVG logos, color mood palettes, typography pairings, and downloadable brand guideline asset packages.

Next.js 16Replicate APISVG CanvasTailwindCSS

Career

Experience

Recent full-stack work — feature ownership, product UI, and shipping with care.

  1. 2025 — Present

    Remote

    Full-Stack Developer · Web & Data

    Product & client projects

    Building and shipping full-stack web features with Next.js and TypeScript, with a strong focus on application security patterns and practical data work.

    • Owned feature slices across UI, API routes, and data access — including authentication, RBAC, and Supabase RLS policy definitions
    • Performed application security reviews on REST APIs and Next.js routes, identifying and resolving authorization logic gaps
    • Applied Python and Pandas to data analysis tasks: cleaning datasets, training ML models, and surfacing results as clear, actionable reports
    • Improved maintainability through typed models, clear folder structure, and documented security trade-offs in code reviews
  2. 2024 — 2025

    Remote

    Junior Full-Stack Developer

    Learning projects & freelance

    Grew from focused frontend work into full-stack delivery and data analysis through applied projects and freelance tasks.

    • Shipped responsive marketing and app UIs with accessibility and SEO basics in mind
    • Practiced REST APIs, auth flows, and PostgreSQL-backed features on real briefs
    • Explored data pipelines and basic ML workflows — built working familiarity with Python, Pandas, and model evaluation patterns
    • Built a habit of writing readable PRs and documenting decisions for collaborators

Learning

Education

Foundations and continuous practice that inform how I build.

2022 — 2026

BS in Computer Science

University of Sindh · Jamshoro, Sindh, Pakistan

Graduated in 2026 with a focus on Software Engineering, Database Systems, Web Technologies, Application Security, and Machine Learning. Final Year Project: ML-powered Blood Sugar Tracker with ElasticNet regression.

Continuous Learning & Credentials

Certifications & Technical Specializations

Verified coursework and professional certificates in modern full-stack development, ML pipelines, and application security.

freeCodeCamp / Meta Specialized

Full-Stack Web Development & Modern React

2025
React 18Next.jsTypeScriptREST APIsState Management
Verified CurriculumCredential Info
AppSec Practitioner Coursework

Application Security & OWASP Top 10 Fundamentals

2025 – 2026
OWASP Top 10RBACSQLi PreventionAuth SecurityRLS Policies
Verified CurriculumCredential Info
Kaggle & Stanford Online

Python for Data Science & Machine Learning

2024
Pythonscikit-learnPandasFeature EngineeringData Modeling
Verified CurriculumCredential Info
Supabase & Postgres Academy

Database Architecture & PostgreSQL Mastery

2025
PostgreSQLSupabaseRow Level SecurityIndexesSchema Design
Verified CurriculumCredential Info

Achievements

Milestones & badges

A wall of earned achievements — from academic milestones to shipped products and mastered skills.

AcademicDevSkillsLearningML
🎓
Academic

2025

FYP Completed

Delivered Blood Sugar Tracker ML system as Final Year Project using Flask & scikit-learn

Unlocked
🚀
Dev

2024

First Production Deployment

Shipped first full-stack Next.js + Supabase app to Vercel with live users

Unlocked
🔥
Dev

2024

GitHub Streak

Maintained consistent GitHub contribution streak across multiple repositories

Unlocked
Skills

2024

Full-Stack Stack Mastered

Proficient in Next.js, TypeScript, Supabase, TailwindCSS, PostgreSQL end-to-end

Unlocked
🛡️
Learning

2025

AppSec Learning Journey

Actively studying Application Security — OWASP Top 10, authentication, and threat modeling

Unlocked
🧠
ML

2025

ML Model Shipped

Built and deployed ElasticNet regression model predicting glucose levels with real accuracy

Unlocked
🌟
Dev

2025

Portfolio Launched

Built premium portfolio with admin CMS, real-time DB, AI chatbot, and mini games

Unlocked
💻
Dev

2024

Open Source Contributor

Published projects on GitHub with clean READMEs and documentation

Unlocked

GitHub Activity & Contributions

Active Streak
@abdulnabii
Total Commits
148+
Streak
24 Days
Longest
45 Days
Hover over squares to inspect daily contributions
LessMore

Workflow & Methodology

How I Build & Ship Production Software

A disciplined 4-stage engineering process ensuring zero-defect deployments, watertight security, and transparent client communication.

01

Discovery & Requirements

Deep dive into your product vision, edge cases, target audience, and database schema requirements to build a rock-solid roadmap.

Deliverables:
  • Product Specification
  • Data Model
  • API Contract
02

Architecture & Security

Designing scalable Next.js App Router architecture, Supabase RLS security policies, RBAC auth flows, and resilient API routes.

Deliverables:
  • DB Architecture
  • Security Audit Plan
  • Component Tree
03

Agile Build & Testing

Writing clean, type-safe TypeScript with responsive Tailwind styling, micro-animations, comprehensive error boundaries, and unit verification.

Deliverables:
  • Type-Safe Codebase
  • Zero Regression Builds
  • Interactive Demos
04

Deployment & Handoff

Production Vercel deployment, automated CI/CD GitHub Actions, custom domain configuration, and complete developer handoff documentation.

Deliverables:
  • Production URL
  • Admin Guide
  • Ongoing Support

Social Proof & Endorsements

What Collaborators & Clients Say

Feedback from engineering leads, startup founders, and project stakeholders on code quality, speed, and delivery.

Abdul delivered a clean Next.js dashboard with zero TypeScript regressions and outstanding Supabase RLS security policies. His attention to edge cases and auth flow security is rare for early-career developers.

HT

Hamza Tariq

Engineering Lead · NextGen Fintech Solutions

Worked with Abdul on an ML-powered health classification tool. He translated complex machine learning metrics into an intuitive, responsive user interface that our clinical trial users loved. Fast delivery and stellar communication.

SJ

Sarah Jenkins

Product Manager & Startup Founder · MedTrack Health

Abdul consistently demonstrates exceptional problem-solving acumen in Python and Full-Stack development. His final year project in blood sugar analytics showcases both academic rigor and real-world software engineering depth.

FQ

Dr. Farhan Qureshi

Assistant Professor & FYP Advisor · University of Sindh

Interactive Dev Labs

Canvas Benchmarks & Game Engines

Zero-dependency browser engines demonstrating real-time canvas rendering, kinematic physics, and state-machine algorithms.

6 Interactive Sandboxes
Get in Touch & Hire

Let's Build Something Exceptional

Available for full-time engineering roles, high-impact contract builds, and AppSec audits. Send a brief note below or reach out directly.

Live Availability Status

Open to full-time engineering / security roles and focused freelance projects

Typical response time: 1–2 business days

Direct Communication Channels

WhatsApp Fast Chat

+92 309 3751434

Instant

Location & Timezone

Karachi, Sindh, Pakistan (PKT / UTC+5)

Professional Networks

Minimum 10 characters0 chars
Confidential · Direct to Abdul Nabi