Muhammad Arfat

Co-founder / Backend Engineer

• Building Beruni, a read-only AWS cloud security posture scanner for startups: connects via a CloudFormation IAM role and STS AssumeRole, evaluating IAM, S3, EC2, VPC, and RDS against a JSON/JMESPath rule library.
• Ranks findings 0–100 by reachability and attack path rather than raw severity; maps each finding to CIS AWS Foundations, AWS FSBP, PCI DSS, and GDPR controls.
• Read-only by design: scoped to the SecurityAudit policy, per-scan short-lived STS tokens, customer-rotatable ExternalId. Currently in closed beta.

Full Stack Developer

• Backend systems on a multi-tenant hospitality SaaS platform on Azure: authentication, service orchestration, deployment pipelines across distributed services.
• Tenant-isolated data flows, inter-service REST APIs, and role-based access controls across multiple enterprise CRM products.
• SuiteCRM v7 & v8 customisations: custom logic hooks, scheduler jobs, module development, MySQL schema design and migrations.

Software Engineer Intern

• Summer internship on enterprise backend systems.

API Developer

• Built the Product Database and Sales Tracking APIs at the core of an e-commerce analytics platform using Python and FastAPI.
• Multi-threaded request handling reduced response times by ~30% at peak load.

Teaching Assistant, Data Structures

• Conducted lab sessions, marked assignments, and supported students in DS fundamentals.

WordPress Developer

• Built and maintained WordPress sites; plugin integrations and theme customisations for client projects.

BS Computer Science

• Dean's Honor List.
• Senior project: IntraSec, a client-less network vulnerability scanner in Python & Go, supervised by Dr. Muhammad Asim, HOD of Cyber Security.