# Mainasara 🇳🇬 (@mainasara.dev)

Profile: https://sifa.id/p/mainasara.dev
Headline: Fullstack Developer & Security Researcher | ISO27001 | OSS Contributor
Location: Abuja, Federal Capital Territory

## About

A software and computing generalist that works in cybersecurity and web development with experience writing software (intrusion detection systems, web crawlers, data processing systems, ELT systems, compilers, payment systems, mailing systems, LLM integrations and offensive security tooling) for continental e-commerce, national security and others, using a multitude of tools and programming languages (React, Typescript, Python, Go, Rust, nmap, Wazuh and more)

## Experience

- **Security Consultant at ASUSU** (2018 – 2019)
  Conducted security assessments to identify vulnerabilities and risks in the company's systems  Developed and implemented security policies and procedures  Stayed up-to-date with the latest security threats and trends, and evaluating new technologies to determine their potential usefulness to the company.
- **Chief Technology Officer at Rushpie** (2019 – 2021)
  Engineered a website generator that coverts instagram store pages to fully functioning e-commerce websites.
  
  Used AWS services to enable customers to automatically purchase domains to host their generated e-commerce website.
- **Cyber Security Analyst at CyberPlural** (2021 – 2022)
  Responsible for monitoring the security alerts from SIEM, EDR, and either closing or passing the event details to T2 for final analysis as necessary.
  
  Performs initial investigation of security events and escalates them to the next level, if required.
  
  Maintains email address and distribution lists, answers SOC phone lines, and updates required documentation.
  
  Performs security research and gathers information about identified threats and vulnerabilities.
  
  Documents initial investigation results and forwards them to a T2 analyst for final investigation.
  
  Monitor security vulnerabilities to detect their root causes.
  
  Conducts security audits, both internal and external.
- **Senior Software Developer at Mel-Fi Technology Limited** (2023 – 2024)
  Leading backend development on multiple features. (Airtime to Cash, Virtual Accounts & more)
- **Team Lead - Research And Development at CyberPlural** (2024 – 2025)
  Leading research and development for internal tooling and other Software needs
- **Senior Software Developer (Volunteer) at Vorbtech Innovative Solutions** (2023 – present)
  Overseeing & leading backend development for client projects
- **Lead Security Engineer at SBTS Group** (2025 – present)
  Threat analysis and reverse engineering of important or critical alerts.
- **Cyber Security Analyst - Tier 2 at CyberPlural** (2022 – 2023)
  In my role as a Tier 2 analyst, I am responsible for responding to and resolving security issues escalated by Tier 1 analysts. I have successfully handled a range of complex issues, including malware infections and network intrusions, and have implemented a number of security measures to prevent future attacks. I have also played a key role in several high-profile projects, including the development of a company-wide security training program.
- **Chief Technology Officer at Catlog** (2022 – 2024)
  In my role as Chief Technology Officer at Catlog, I spearheaded the creation of innovative solutions for buyers & sellers on social media, utilizing technologies like MongoDB, Typescript, Nest.JS, and websockets. This enabled real-time transaction monitoring and secure payment options, such as payment links, bnpl transfers, and debit cards.
- **Cyber Security Engineer (Volunteer) at Whitehat.NG** (2020 – present)
- **Founder & CEO at QRK Technologies** (2025 – present)
- **Back End Developer at Provarex** (2019 – 2019)
  While at Provarex, I did the following  Designing and building the platform's application programming interface (API), which allows different components of the system to communicate with each other.
  
  Developing and maintaining the platform's database and data model, ensuring that the data is properly structured and stored for efficient retrieval.
  
  Implementing and optimizing the platform's business logic and algorithms.
  
  Working with front-end developers to ensure that the platform's user interface is properly integrated with the back-end components.
  
  Debugging and fixing issues that arise in the platform's back-end systems.
  
  Collaborating with other team members to design and implement new features and functionality Ensuring that the platform's back-end systems are scalable, reliable, and secure.

## Education

- **Federal University of Technology Minna** — Bachelor of Technology - BTech (2016 – 2023)

## Skills

- TypeScript
- PostgreSQL
- Microservices
- Malware Detection
- Laravel
- Express.js
- C (Programming Language)
- Cryptography
- Red Teaming
- Software Development
- Malware Analysis
- Cybersecurity
- C Suite
- MongoDB
- Back-End Web Development
- Tailwind CSS
- react
- Multiprocessing
- React.js
- Wazuh
- API Development
- PHP
- Next.js
- Go (Programming Language)
- Technical Writing
- Computer Forensics
- Python (Programming Language)
- Threat Analysis
- Payment Systems
- Node.js
- Reverse Engineering
- SIEM
- Deep Web Analysis
- FinTech
- NestJS
- Web Application Development
- Server Side Programming
- nextjs
- osint
- cPanel
- Front-End Development
- Linux System Administration
- DevOps
- Amazon Web Services (AWS)
- Research and Development (R&D)

## Certifications

- CISCO Certified Ethical Hacker — Cisco Networking Academy

## Projects

- **Valradar**
  Valradar is an offensive security tool designed to enable security researchers to quickly look for certain values en-masse using regex.

## Publications

- vuln-pkg: The Boredom-Fueled Package Manager for Your Homelab
- So This Is How It Feels — neutrino2211.leaflet.pub (https://neutrino2211.leaflet.pub/3m4nvhtyk7c2c)
- Talk: TechXCite 2024 Personal Security in an AI powered world
- Explicit Security Is Always Better Than Implicit Security
- Gecko: Making a programming language is hard 😮‍💨
- Technical Analysis: Async Rat 👾
- Demonstration: Cyberplural phishkit & How to setup and deploy a phishing site
- What Is Concurrency In Node JS?
- How To Avoid Javascript Bugs
- Avoiding Weird Javascript Behaviour (true + true === 2 but true !== 1)
- Using CSS Selectors In Javascript
- Do We Need To Compile Website Components?
- Web Components, for when VueJS is too much

## Other profiles

- website: https://mainasara.dev