Skip to main content
Open to new opportunities · Jhelum, Pakistan

Mudassar Shabbir

Full-Stack MERN & Flutter Developer | Cybersecurity Enthusiast

Security-focused Computer Science student combining full-stack MERN and Flutter development with hands-on cybersecurity skills — penetration testing, vulnerability assessment, incident response, and digital forensics. Experienced in building scalable, secure web and mobile applications aligned with OWASP best practices.

View My WorkLet's ConnectDownload CV
Portrait of Mudassar Shabbir

Mudassar Shabbir

Cybersecurity Enthusiast

What I Do

Three disciplines, one professional.

I don't specialize in just shipping features — I specialize in shipping features that hold up under scrutiny.

Full-Stack Development

Building scalable web platforms end-to-end with the MERN stack and Laravel/PHP — from database schema to production-ready UI.

ReactNode.jsExpressMongoDBLaravelMySQL

Mobile Engineering

Cross-platform mobile apps in Flutter with Supabase backends — role-based dashboards, real-time data, and secure authentication.

FlutterDartSupabaseRealtimeRLS

Cybersecurity

Penetration testing and vulnerability assessment aligned with OWASP Top 10 — from Kali Linux tooling to documented remediation.

Kali LinuxBurp SuiteWiresharkOWASP Top 10

Core Toolkit

The languages, frameworks, and tools behind every project below.

Programming Languages

JavaC++JavaScriptPythonPHPDart (Flutter)

Development & Systems

MERN Stack (Node.js/React)Laravel/PHPFlutterMySQL/SQLLinux Fundamentals

Cybersecurity

Penetration TestingOWASP Top 10Vulnerability AssessmentCryptography & Secure DevNetwork SecurityNmapCaidoFFUFFeroxBuster

Security Tools

Kali LinuxBurp SuiteWiresharkGit/GitHubSupabase Auth & SecuritySplunkWazuh
Experience

Where I've applied it.

From defense-sector ERP systems to mobile security operations — hands-on roles that paired development with a security mindset.

  • Mobile Application Developer & Cybersecurity Manager (Intern)

    Current
    Onlinecer Solutions Pvt LtdJuly 2026 – Present

    Serving as Mobile Application Developer & Cybersecurity Manager, applying Flutter development skills alongside cybersecurity best practices to support the company's mobile applications and security operations.

  • Software Development Intern

    Pakistan Aeronautical Complex (PAC), Kamra6-week internship

    Completed a 6-week internship covering aircraft maintenance systems, intranet networking, and ERP integration within a sensitive defense environment. Built a MERN-stack Job Tracking System with role-based access control and secure authentication; mapped PAC's ERP modules with IT teams to strengthen system alignment and security.

  • Mediator

    Cloud Solutions

    Served as technical liaison between software engineers and clients, clarifying security and functional requirements and resolving conflicts to ensure secure project delivery.

  • Security Co-Head / Operations Lead / Secretary General

    COMSATS Sports Society

    Managed event security and operations for university sports events, ensuring smooth execution while developing problem-solving and leadership skills.

Featured Projects

Built, shipped, and stress-tested.

Projects spanning the full stack, mobile, and offensive security — each one shipped with the same instinct: assume it will be attacked.

Woodzilla

Built with precision. Designed for luxury.

Premium luxury furniture e-commerce platform with a modern responsive storefront, smart pricing, AJAX cart, wishlist, reviews, checkout, order tracking, WhatsApp integration, and a powerful admin dashboard.

Core PHP 8+MySQL/MariaDBHTML5CSS3Vanilla JavaScriptAJAXApacheChart.jsFont AwesomePDO

PDO prepared statements, bcrypt password hashing, session-based authentication, admin role protection, XSS-safe output handling, and file upload validation. Production should add CSRF protection, HTTPS, secure database credentials, and automated backups.

StreamVault

Video Streaming Platform

Built a video platform with resumable uploads, adaptive HLS streaming, real-time encoding, and JWT-based authentication.

ReactNode.jsMySQLFFmpeg

JWT-based authentication

PadelPK

Court Booking Platform

Built a secure booking platform with role-based access, real-time slot availability, online payments, and race-safe double-booking prevention.

PHPMySQLJavaScript

Role-based access, race-safe booking

KnowledgeX

Knowledge Sharing & Request Management System

Built role-based dashboards with protected content-approval workflows, input sanitization, and OWASP-aligned access control.

LaravelPHPMySQL

Input sanitization, OWASP-aligned access control

AquaFlow

Water Delivery Platform

Built a role-based platform with secure authentication, order management, real-time tracking, and Supabase RLS.

FlutterSupabase

Supabase Row-Level Security

CONNECT

ISP Management System

Developed role-based dashboards, encrypted billing workflows, and Bluetooth-based invoice printing with session-controlled authorization.

FlutterSupabase

Encrypted billing, session-controlled authorization

Web Application Security Testing

OWASP-Focused Penetration Testing

Conducted hands-on penetration testing on custom web applications; identified authentication and access-control flaws and applied OWASP Top 10 mitigations (CSRF, SQL injection, XSS) with documented remediation guidance.

Node.jsLaravelPHP

CSRF, SQL injection, XSS mitigation

The Security Edge

I Don't Just Build Software. I Think About How It Can Break.

Every application I ship is built by someone who has also tried to break one.

OWASP Top 10

Penetration testing and vulnerability assessment applied across web applications — authentication flaws, access-control gaps, CSRF, SQL injection, and XSS, with documented remediation guidance.

Incident Response & Forensics

IBM Incident Response & Digital Forensics certified — trained to investigate, contain, and document security incidents methodically.

SOC & Monitoring

Hands-on experience with Splunk and Wazuh for log analysis and monitoring, plus Burp Suite and Wireshark for traffic and vulnerability inspection.

Kali LinuxBurp SuiteWiresharkSplunkWazuhOWASP Top 10

Certifications

Google Cybersecurity Professional CertificateIBM Incident Response & Digital ForensicsHands-On Web Application PentestingPractical Splunk for BeginnersHack the Planet 2–4 Cybersecurity Training Series
Contact

Let's build something secure.

Have a role, a project, or a security review in mind? Send a message and I'll get back to you.

Emailmudassar.jehlum@gmail.comPhone+92-311-0059536
LocationJhelum, Pakistan