JUL 2025 — PRESENT
Security Engineer
Welford Systems
Testing enterprise platforms, IAM/IAG, and backend APIs. Investigating vulnerabilities and collaborating with engineers on validation and remediation.
Cybersecurity enthusiast · Security Engineer
I’m aathilducky.
Security Engineer.
At Welford Systems, I focus on penetration testing, IAM, and IAG security. I build practical tools and automate repetitive tasks to make security work more effective.
Currently learningSecurity architecture & design and cloud platform security.
70+
IAG vulnerabilities identifiedEnterprise identity platform research
20+
LMS vulnerabilities identifiedLearning platform security testing
1+ yr
Hands-on security experienceResearch through remediation support
3+ yrs
Development experienceWeb applications, backend systems & integrations
01 / ABOUT
Security Engineer
& Developer.
I'm Aathil Ahamed, a Security Engineer at Welford Systems with 3+ years of development experience. I combine penetration testing and IAM/IAG security with hands-on experience building web, backend, and desktop applications.
Alongside my security work, I've completed 10+ freelance projects and create content part-time to share what I learn.
More about me & my experience02 / EXPERIENCE
An engineering foundation.
A focus on security.
From building applications to testing the systems behind them, my work connects development with practical security.
Full experience & qualifications2022 — PRESENT
Freelance Web Developer
Independent · Part-time
Delivered 10+ projects, including websites, POS software, and custom business systems, with full-stack development, integrations, and SEO.
OCT 2022 — DEC 2024
Web Developer
CBS Solution (Pvt) Ltd
Built and maintained WordPress and Django applications, custom features, and plugins, with backend development and production support.
03 / ONLINE TOOLS
Small tools.
Practical security work.
04 / SELECTED PROJECTS
Built to solve
practical problems.
01Security research
02Reconnaissance
03Research tooling
Duck Leak Scanner
Scan GitHub repositories and web apps for exposed secrets with a clean dashboard.
Subdomain Status Monitor
Check and track subdomain status codes fast with a lightweight CLI.
Ducky Pwn Docs
Electron intelligence command center with local SQLite persistence.
05 / FREELANCE DEVELOPMENT
Custom software.
Built around real needs.
10+ freelance projects completed, including websites, POS software, and custom business systems. I also work on desktop applications, integrations, and SEO.
Explore my freelance work10+Freelance projects
completed
completed
06 / GET IN TOUCH
Let's build
something useful.
Have a security question, a collaboration idea, or a development project? I'd be happy to hear from you.