Identity & access security
IAM/IAG platform assessment, authentication and authorization testing, and access-control review.
I'm Aathil Ahamed, a Security Engineer at Welford Systems and a Full-Stack Developer with 3+ years of development experience. My security work focuses on penetration testing, Identity & Access Management (IAM), Identity & Access Governance (IAG), and web application and API security.
Alongside my security role, I work as a freelance web developer and have completed 10+ freelance projects, including point-of-sale (POS) software, custom business systems, websites, and web applications. I also support website search engine optimization (SEO).
My development background helps me understand systems from implementation through to security testing. I build tools in Go and Python, automate repetitive tasks, and work with engineering teams on practical fixes. AI-assisted workflows support my research; findings stay human-validated.
Application security
Web and API testing, vulnerability research, secure code review, and prioritized remediation.
Security tooling & automation
Go and Python tooling, reconnaissance workflows, Linux hardening, and automation that reduces repetitive security work.
Full-stack & desktop development
Web applications, backend APIs, POS software, and custom systems, supported by experience across frontend, database, and desktop technologies.
DEVELOPMENT & SECURITY STACK
My technology toolkit.
The frameworks, platforms, and security tools I use to build applications, investigate weaknesses, and automate my work.
Frontend & CMS
React.js
Next.js
Tailwind CSS
WordPress
Backend & APIs
Python
Node.js
FastAPI
Flask
Django
Go (Golang)
Desktop applications
Electron
PyQt6
Databases
PostgreSQL
SQLite
MySQL
Penetration testing
Pentesting
Burp Suite
Metasploit- Web & API security
Identity & research
IAM- IAG
OSINT
Vulnerability research
Access-control review
Cloud & systems
AWS
Linux
Security automation
Currently developing my cloud security knowledge on AWS.
Design & workflow
Figma
Git
SEO
04 / Experience
Built on experience.
Driven by curiosity.
Certified Welford IAG Engineer
Welford Systems · 2025
BSc in Computer Science
Eastern University, Sri Lanka · 2021–2026
Research: Sensitive Information Finder in Client-Side Code
Welford Systems · 2025
BSc in Computer Science
Eastern University, Sri Lanka · 2021–2026
Research: Sensitive Information Finder in Client-Side Code
JUL 2025 — PRESENT
Security Engineer
Welford Systems
Vulnerability research, application security testing, and security reviews across enterprise platforms. Assessing authentication, authorization, and backend APIs, and working with engineers to validate and remediate findings.
2022 — PRESENT
Freelance Web Developer
Independent · Part-time
Completed 10+ freelance projects across websites, POS software, and custom business systems. Work includes frontend and backend development, API integrations, desktop applications, and SEO.
OCT 2022 — DEC 2024
Web Developer
CBS Solution (Pvt) Ltd
Built and maintained WordPress and Django applications, custom features, and plugins. Delivered backend functionality and production support with an emphasis on secure implementation and vulnerability remediation.
Learning in depth. Sharing along the way.
I'm also creating content part-time, sharing what I learn about cybersecurity, practical tools, and technology.