2023 – 2027 (Expected)
B.Sc. in Computer Science & Engineering
Military Institute of Science and Technology (MIST), Dhaka
CGPA 3.58 / 4.00 (up to Level-3, Term-2)
Dhaka, Bangladesh · UTC+6
Md Saif Ahmed
Software Engineer · Competitive Programmer · Cybersecurity Practitioner
CSE undergraduate at MIST building production software, competing at the ICPC Asia Dhaka Regional, and teaching web security.
Open to software engineering roles and internships, including remote work
01
About
I am a Computer Science & Engineering student at the Military Institute of Science and Technology (MIST), Dhaka, graduating in 2027. I am the sole developer of Hasnahena, an interest-free cooperative finance platform that has been live with real members since August 2026.
Competitive programming is where I learned to think: I am a Codeforces Specialist with 1700+ problems solved, and my team placed 38th at the ICPC Asia Dhaka Regional 2025. I now lead the MIST Computer Club as President and mentor junior programmers.
On the security side, I play CTFs with my university teams and taught OWASP Top 10 and penetration testing workshops as a Web Security Instructor at the MIST Cyber Security Club.
Education
2022
Higher Secondary Certificate (HSC)
Govt. M. M. College, Jashore
GPA 5.00 / 5.00
02
Selected work
Live · Solo developer
Hasnahena
Interest-free cooperative finance platform
Digitises the passbook of Hasnahena Foundation, a community-run interest-free (Qard al-Hasan) cooperative in Jashore, Bangladesh. Live with real members, balances and identity documents since the cutover on 27 August 2026.
- Aug 2026
- Live with real members
- ~180/s
- Postings sustained in load test
- 45
- Architecture Decision Records
- < 1 h
- Recovery time objective
Architecture
pnpm monorepo: Next.js 16 web app on Vercel and a Go API on Render that owns every balance-changing write, each in a single transaction with row-level locks; money is whole taka, never floats. PostgreSQL on Neon with Prisma Migrate; fully bilingual English / Bengali.
Security
RBAC on every endpoint, self-hosted JWT with server-side revocation checked by both backends, Cloudflare-aware rate limiting and lockout, append-only audit logs enforced by a database trigger, and per-route Content Security Policies.
Reliability
Daily ledger reconciliation, encrypted daily backups shipped to Cloudflare R2 with a restore drill in CI (RPO 24 h), Prometheus metrics, Sentry and UptimeRobot monitoring.
Testing
269 Go tests, including integration tests against real Postgres under -race, Playwright e2e across phone/desktop × English/Bengali, 400k-iteration money arithmetic property tests, and gitleaks secret scanning in CI.
More projects
Team project
QuestBoard
Gamified Q&A for STEM students
Post a “quest” with a point bounty; the accepted answer’s author earns the points. Flutter client, FastAPI backend on Supabase Postgres.
My partWrote all of the current server code: ~40 FastAPI endpoints, an atomic point ledger, race-safe voting, Codeforces daily challenges, Claude API hints refunded on failure, and 70 pytest tests run in CI against real Postgres. Deployed on Render.
- FastAPI
- PostgreSQL
- Claude API
- pytest
- Flutter
- Sentry
Team project
LocalFix
Civic engagement platform
Complaint management system where citizens report civic issues such as roads and waste to authorities. Role-based access control and optimized Oracle SQL queries cut data retrieval latency by 40%.
My partWrote ~95% of the Express API and the Oracle schema: 14 triggers, 3 stored procedures, 3 views and 27 indexes as numbered migrations.
- React
- Express
- Oracle DB
- PL/SQL
- JWT
- Mapbox GL
Team project
HallBridge
Digital hall management system
Seat allocation, billing and notices digitized for 500+ residents, with dashboards for students, staff and admins, and a dining manager whose predictive meal planning brought food wastage to near-zero.
My partWrote ~64% of the API and ~81% of the data models, including Google OAuth 2.0 sign-in, password reset and the indexes behind the busiest queries.
- Next.js
- TypeScript
- MongoDB
- OAuth 2.0
- Tailwind
- Supabase
Team · In production
MCC Website
MIST Computer Club platform
The club’s production website with a rich-text editor, in-browser code editor, a Discord bot and containerized services deployed through GitHub Actions.
My partBuilt the alumni directory end to end (Hono API, migrations, pages) and fixed broken access control on the contest-report endpoints.
- Next.js
- Bun
- Hono
- PostgreSQL
- Docker
- discord.js
Solo
BruteBuddy
Automated security testing tool
CLI for fuzzing and brute-force testing of login endpoints: multi-field payloads, custom headers and cookies, automatic re-authentication, and parallel requests for 3× faster runs.
- Python
- requests
- ThreadPoolExecutor
Team project
GyanTori
Peer-to-peer book sharing
Desktop virtual library for 500+ students to lend, borrow and catalog books, backed by a MongoDB schema for inventory relationships and transaction history.
- Java
- JavaFX
- Maven
- MongoDB
Tools & scripts
- Rank-Raven
Codeforces reporter: counts each user’s solves over 30 days via the API and generates a styled PDF report.
Python · Selenium · ReportLab
- upsolve_tracker
Schedules near-miss Codeforces problems, times solves and detects AC automatically; vjudge sync.
Apps Script · Sheets · Codeforces API
- Code-Library
MIST_EagleForces ICPC team notebook, with a Python script that builds the contest PDF.
C++ · LaTeX · Python
- Faculty-Evaluation
Automates the university’s faculty evaluation form, with a step-by-step Windows guide.
Python · Selenium
03
Competitive programming
Codeforces
Specialist
Max rating 1514
CodeChef
3-Star
Max rating 1722
All judges
1700+
Codeforces, CodeChef, LeetCode, CSES, AtCoder
ICPC Asia Dhaka Regional
| Rank | Contest | When |
|---|---|---|
| 38th | ICPC Asia Dhaka Regional 2025 — Onsite MIST_EagleForces · Excluding BDOI teams · official 39th of 313 | Dec 2025 |
| 290th / 1842 | ICPC Dhaka Regional 2025 — Preliminary MIST_EagleForces | Nov 2025 |
| Rank | Contest | When |
|---|---|---|
| 117th | ICPC Asia Dhaka Regional 2024 — Onsite MIST_ChemistryHaters · Excluding BDOI teams · official 118th of 310 | Dec 2024 |
| 90th / 2490 | ICPC Dhaka Regional 2024 — Preliminary MIST_ChemistryHaters | Nov 2024 |
Inter-university contests 13
| Rank | Contest | When |
|---|---|---|
| 16th / 159 | NSUCEC Cybernauts IUPC 2026 MIST_EaglesClaw | 2026 |
| 46th / 111 | IUT 12th ICT Fest IUPC 2026 MIST_Jackdaw | 2026 |
| 44th / 137 | SUST CSE Carnival IUPC 2026 MIST_Jackdaw | 2026 |
| 24th / 139 | DUET IUPC 2026 MIST_Jackdaw | 2026 |
| 32nd / 85 | NDUB IUPC 2026 MIST_EaglesClaw | 2026 |
| 28th / 131 | CUET IUPC 2025 MIST_EagleForces | 2025 |
| 49th / 99 | MU CSE Fest IUPC 2025 MIST_EagleForces | 2025 |
| Rank | Contest | When |
|---|---|---|
| Champion / 28 | BUP IAUPC 2025 (BUP CSE Tech Carnival) MIST_EagleForces | 2025 |
| 54th / 122 | Uttara University IUPC 2025 MIST_EagleForces | Jun 2025 |
| 16th / 137 | DUET IUPC 2025 MIST_ShuRZo | 2025 |
| 48th / 129 | AUST IUPC 2025 MIST_AlgorithmRejects | Feb 2025 |
| 43rd / 161 | UIU IUPC 2025 MIST_AlgorithmRejects | Jan 2025 |
| 89th / 161 | KUET IUPC 2025 MIST_AlgorithmReject · Official standings | Jan 2025 |
Meta Hacker Cup 2024 — advanced to Round 2
04
Cybersecurity
CTF results
- 5th Cyber Drill 2025 / WTISD Hackathon MIST_Shaheed_Yamin_Forever
- 13th SMP CTF 2024 MIST_Shaheed_Yamin_Forever
- 34th Bugcrowd USA CTF 2025 · Global MSYF2.0
- 18th BUET CTF 2024 — Final MIST_Hacker_Vab_Skill_r_Ovab
- 18th Cyber Raid 2025 — Final MIST_Shaheed_Yamin_Forever
- 18th BCS ICT Fest CTF 2025 MIST_Shaheed_Yamin_Forever
- 18th DIU Cybercon CTF 2025 — Final MSYF2.0
- 18th BUP CTF 2025 MSYF2.0
Hands-on practice
70+
PortSwigger Academy labs across 10+ web security categories
67+
PicoCTF challenges solved, plus the OverTheWire Natas series
29
TryHackMe rooms completed
Training
- Hands-on Ethical Hacking and Security Analysis — MIST Cyber Security Club
- eShikhon Ethical Hacking Live Course
Hackathons
- MIST Intra Hackathon 2025
- BUP CSE Fest 2026 Hackathon (onsite)
05
Experience & leadership
-
May 2024 – Present
President · MIST Computer Club
- Executive Member May 2024
- Vice President May 2025
- President Jun 2026
- Leading club strategy and mentoring 15+ core members to deliver 10+ technical events a year.
- Directing ICPC preparation camps and workshops that reach 200+ students.
- As Vice President, coordinated programming workshops and contest initiatives and supported training for junior members; as Executive Member, handled event logistics and community training.
-
2026 · 4 weeks
Industrial Trainee · JB Connect Ltd (JBC)
- Set up the FastAPI backend of the training cohort’s AI content-generation app: router → service → repository layers, env-driven settings, error handlers and a Docker dev setup.
- Built the content-generation endpoint behind a mockable AI client, working through feature branches and pull requests, alongside sessions on DevOps, backend and AI/ML.
-
May 2024 – Present
Competitive Programming Instructor · MIST Computer Club
- Mentoring 50+ junior students in algorithms and contest strategy with an 80% retention rate.
- Curated 20+ problem sets and mock contests for teams advancing in ICPC preliminaries.
-
May 2024 – Jun 2026
Web Security Instructor · MIST Cyber Security Club
- Ran hands-on OWASP Top 10 workshops with real-world exploitation scenarios; trained 30+ students in penetration testing and secure coding.
-
Jun 2025 – Jun 2026
Executive Director · Mentor Committee
- Coordinated security mentoring initiatives and learning tracks.
06
Skills
Languages
- C++
- Go
- Python
- TypeScript
- JavaScript
- Java
- Dart
- SQL
- Bash
Frontend
- React
- Next.js
- Tailwind CSS
- shadcn/ui
- Radix UI
- next-intl
- Flutter
- JavaFX
Backend
- Go (chi, pgx)
- Node.js
- Express
- FastAPI
- Bun + Hono
- REST APIs
- JWT
Data
- PostgreSQL
- MongoDB
- Oracle Database
- MySQL
- Prisma
- SQLAlchemy
- Supabase
Cloud & DevOps
- GitHub Actions
- Docker
- Vercel
- Render
- Neon
- Cloudflare
- Sentry
- UptimeRobot
- Prometheus
- Linux
Testing
- Playwright
- Vitest
- Go testing
- pytest
- ESLint
- golangci-lint
Security
- OWASP Top 10
- Penetration testing
- Burp Suite
- Wireshark
- CSP
- gitleaks
- RBAC
Core CS
- Data structures
- Algorithms (graphs, DP, segment trees)
- OOP
- System design
07 — Contact
Let’s build something reliable.
I’m open to software engineering roles, internships and collaborations, including remote work (UTC+6). The quickest way to reach me is email.