Skip to content
View SecureAuditX's full-sized avatar

Block or report SecureAuditX

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
SecureAuditX/README.md

πŸ‘‹ Abdulkarim Umar

Software Engineer | Full-Stack Web & Mobile | Application & Product Security

I am a Software Engineer focused on full-stack web and cross-platform mobile application development, with a growing specialization in Application Security and Product Security.

I design and build software across the full product lifecycle β€” from UI/UX and mobile applications to APIs, backend services, databases, cloud infrastructure, and security controls.

My primary development stack is React Native + Expo + TypeScript for mobile and React + Next.js + TypeScript for web, supported by backend technologies including Laravel, Node.js/TypeScript, Spring Boot, PHP, Python, PostgreSQL, MySQL, MongoDB, and Redis.

I work on both product engineering and security-driven software development, with an emphasis on maintainable architecture, secure implementation, scalable systems, and practical user experiences.

Software Engineering β€’ Mobile β€’ Full Stack β€’ Security β€’ System Design


πŸš€ What I Do

  • πŸ“± Cross-platform mobile application development
  • 🌐 Full-stack web application development
  • βš™οΈ REST API and backend engineering
  • πŸ—„οΈ Database architecture and optimization
  • πŸ—οΈ System and application architecture
  • πŸ” Authentication, authorization, and secure API design
  • πŸ›‘οΈ Application Security and Product Security
  • ☁️ Cloud infrastructure and application deployment
  • 🎬 Media streaming and content delivery systems
  • πŸ’³ Digital commerce and payment integrations
  • πŸ€– AI-powered applications and automation
  • 🧩 White-label and multi-application platforms
  • 🎨 UI/UX implementation and design systems

⭐ Featured Engineering Projects

01. πŸ“š StoryStream β€” Digital Content & White-Label Platform

Production Content Platform β€’ Multi-Application Architecture β€’ Digital Commerce

StoryStream is a production-oriented digital content platform supporting novels, comics, and video content, developed as part of a larger white-label application ecosystem.

The platform is designed to support multiple independent branded applications while sharing common backend and infrastructure capabilities.

Architecture

31 Independent Mobile Applications
              β”‚
              β–Ό
      Shared Backend Codebase
              β”‚
              β–Ό
       Shared Admin Platform
              β”‚
        β”Œβ”€β”€β”€β”€β”€β”΄β”€β”€β”€β”€β”€β”
        β–Ό           β–Ό
    OSS / CDN   Shared Services
        β”‚
        β–Ό
31 Independent Databases

Technology

UniApp Vue 3 Laravel 13 PHP 8.4 PostgreSQL 16 Redis Nginx Alibaba Cloud ECS Alibaba OSS CDN HLS Vite

Engineering Areas

  • πŸ“š Novel, comic, and video content management
  • 🎬 HLS-based video delivery
  • πŸ’° Coins and subscription systems
  • πŸ’³ Google Play Billing
  • πŸ“± Android application distribution
  • 🌍 Multi-brand application architecture
  • πŸ—ƒοΈ Independent database per application
  • ☁️ Alibaba Cloud infrastructure
  • πŸ“¦ Object storage and CDN delivery
  • πŸ” Authentication and authorization
  • πŸ› οΈ Centralized administration
  • 🌐 Internationalization
  • 🎨 Brand-specific application configuration
  • πŸ“Š Synthetic-user generation
  • πŸ“ˆ Content engagement simulation
  • πŸ”„ Background processing and scheduled workflows
  • πŸ”’ Backend-side validation and security controls

This project involves production application engineering, digital commerce, cloud infrastructure, mobile distribution, content systems, media delivery, and large-scale application architecture.


02. πŸ›‘οΈ IRB_Smart β€” Clinical Research & Ethics Management Platform

Enterprise Application β€’ Workflow Management β€’ Secure Backend Engineering

IRB_Smart is a clinical research and ethics management platform designed to manage research applications, ethics review, researcher workflows, meetings, decisions, attachments, and pre-review processes.

Technology

Next.js 15 TypeScript Tailwind CSS v4 Shadcn UI Recharts Spring Boot Java PostgreSQL Flyway JWT

Engineering Areas

  • πŸ§‘β€πŸ”¬ Researcher application management
  • πŸ“‹ Amendment workflows
  • πŸ”„ Annual continuing-review workflows
  • πŸ”Ž AI-assisted pre-review
  • βš™οΈ Rule-engine based validation
  • πŸ“Ž Required field and attachment validation
  • πŸ“Š Application scoring
  • πŸ“ Decision letters
  • πŸ—“οΈ Researcher meetings
  • πŸ“‘ Agenda and application relationships
  • πŸ” JWT authentication
  • πŸ—„οΈ PostgreSQL architecture
  • πŸ”„ Flyway database migrations
  • 🧩 Modular Spring Boot architecture
  • πŸ—οΈ REST API design
  • πŸ›‘οΈ Secure enterprise workflow implementation

The pre-review system uses a deterministic rule engine to validate application completeness, required information, and required attachments rather than relying solely on generative AI.


03. πŸ“± DayOne β€” Student Productivity & Health Platform

React Native β€’ Expo β€’ TypeScript β€’ Mobile Product

DayOne is a cross-platform productivity application combining task management, reminders, health activities, progress tracking, gamification, and global productivity insights.

Technology

Non-Disclosure Information

Product Areas

  • βœ… Task management
  • πŸ“… Scheduling
  • πŸ” Recurring tasks
  • πŸ”” Reminders
  • πŸ“ˆ Productivity analytics
  • πŸ”₯ Streak tracking
  • πŸ† Global leaderboard
  • πŸͺ™ Gamification
  • πŸ’§ Water-intake tracking
  • 🍎 Daily health activities
  • 🌍 Internationalization
  • πŸŒ™ Automatic theme detection
  • πŸ“± Mobile-first UX

Engineering Areas

  • Non-Disclosure Information

Technology Direction

Non-Disclosure Information


04. πŸ’¬ Real-Time Chat & Payment Application - coming soon...2027

Mobile Application β€’ Real-Time Communication β€’ Digital Payments

A planned mobile product combining real-time communication with digital payment functionality.

Engineering Areas

  • Non-Disclosure Information

Technology Direction

Non-Disclosure Information


05. πŸ€– AI Video Generator

AI Application β€’ Full-Stack Web

A TypeScript-based web application integrating AI-powered video generation workflows.

Technology

Next.js React TypeScript Supabase AI APIs

Areas

  • AI-assisted content generation
  • Media generation workflows
  • API integration
  • Authentication
  • Backend services
  • Responsive UI
  • Modern web architecture

06. πŸ›’ Convenient Shop Management System

A Python + CustomTkinter desktop application designed for retail management.

Features

  • User authentication
  • Shopping cart management
  • Dynamic dashboards
  • MySQL backend
  • Secure database operations
  • Modular UI architecture
  • Retail workflows

Technology

Python CustomTkinter MySQL


07. 🎬 Online Video Store Platform

A PHP + MySQL web application implementing digital commerce functionality.

Features

  • Customer registration
  • Authentication
  • Product/video browsing
  • Shopping cart
  • Order processing
  • Relational database design
  • Query optimization

Technology

PHP MySQL HTML CSS JavaScript


08. 🧠 Algorithmic Toolkit

A collection of JavaScript and Python implementations for academic and practical problem solving.

Includes

  • Algorithms
  • Data structures
  • Greedy algorithms
  • Optimization problems
  • Computational thinking
  • Logic-based workflows

Technology

JavaScript Python


πŸ’» Technical Expertise

πŸ“± Mobile Engineering

React Native Expo TypeScript JavaScript UniApp

  • Cross-platform mobile development
  • Native platform integration
  • Reusable component architecture
  • Navigation
  • State management
  • REST API integration
  • Push notifications
  • Local storage and caching
  • Internationalization
  • Performance optimization
  • Android/iOS application packaging

🌐 Frontend Engineering

React Next.js TypeScript JavaScript Vue 3 UniApp Tailwind CSS Element Plus Shadcn UI Vite

  • Component-driven architecture
  • Responsive design
  • Design systems
  • Server/client rendering
  • API integration
  • State management
  • Form handling
  • Data visualization
  • Internationalization
  • Reusable UI systems
  • Mobile-first interfaces

βš™οΈ Backend Engineering

Laravel PHP Node.js TypeScript Spring Boot Java Python

  • REST API development
  • Authentication
  • Authorization
  • JWT
  • Refresh tokens
  • OTP systems
  • Business logic
  • Workflow engines
  • Background jobs
  • Queues
  • API validation
  • Secure backend architecture

πŸ—„οΈ Database Engineering

PostgreSQL MySQL MongoDB Redis

  • Database modeling
  • Schema design
  • Relational architecture
  • Indexing
  • Query optimization
  • Database migrations
  • Data integrity
  • Transactions
  • Caching
  • Database-per-application architecture

☁️ Cloud, Infrastructure & Deployment

Technologies

Linux Ubuntu Nginx Alibaba Cloud ECS Alibaba OSS CDN Cloudflare Git GitHub

Experience Areas

  • Linux server administration
  • Nginx configuration
  • Reverse proxy configuration
  • SSL/TLS
  • DNS configuration
  • CDN configuration
  • Object storage
  • Media delivery
  • Application deployment
  • Production environment management
  • Cloud infrastructure
  • Domain and certificate configuration

πŸ” Security Engineering

Application Security

  • Secure authentication
  • Authorization and access control
  • JWT security
  • Refresh-token security
  • OTP flows
  • Input validation
  • SQL injection prevention
  • API security
  • Encryption
  • Secure database operations
  • Secure file handling
  • Defensive programming

Product Security

  • Security-by-design
  • Threat modeling
  • Secure SDLC
  • Vulnerability prevention
  • Security testing
  • Dependency security
  • Supply-chain security
  • Security architecture
  • Secure deployment practices

πŸ€– AI / Data / Automation

Python TensorFlow scikit-learn Pandas NumPy SciPy Matplotlib Plotly Streamlit

Areas

  • Machine learning
  • Fraud detection
  • Data analysis
  • Data visualization
  • AI application integration
  • Automation
  • Intelligent workflows
  • Security analytics

🧰 Development Tools

Git GitHub Postman Figma Canva HBuilderX Vite npm Yarn NVM

Development & Testing

  • Git / GitHub
  • Postman
  • REST API testing
  • Package management
  • Environment configuration
  • Version management
  • API debugging
  • Mobile development tooling

πŸ—οΈ Architecture & System Design

I am particularly interested in designing systems around:

  • Modular monoliths
  • RESTful APIs
  • Distributed systems
  • White-label platforms
  • Multi-application ecosystems
  • Database-per-application architectures
  • Background jobs
  • Queue-based processing
  • Redis caching
  • CDN-based content delivery
  • Object storage
  • Media streaming
  • Authentication services
  • Digital commerce systems
  • Enterprise workflows
  • Secure system architecture

πŸ“š Engineering Direction

My current development path is:

Mobile Engineering
       β”‚
       β–Ό
Full-Stack Development
       β”‚
       β–Ό
Backend Engineering
       β”‚
       β–Ό
System Design
       β”‚
       β–Ό
Cloud & Infrastructure
       β”‚
       β–Ό
Application Security
       β”‚
       β–Ό
Product Security

I am building toward the ability to independently engineer complete products across:

Frontend β†’ Mobile β†’ API β†’ Backend β†’ Database β†’ Infrastructure β†’ Security


🎯 Professional Focus

Primary

  • Full-Stack Software Engineering
  • React Native / Mobile Engineering
  • React / Next.js
  • Backend Engineering
  • System Design
  • Application Security
  • Product Security

Secondary

  • AI-powered applications
  • Security automation
  • Cloud infrastructure
  • Data-driven systems
  • Digital commerce
  • Media/content platforms
  • Enterprise workflow systems

🧭 Engineering Philosophy

                 GOOD SOFTWARE
                      β”‚
       β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
       β–Ό              β–Ό              β–Ό
   Architecture      UX          Security
       β”‚              β”‚              β”‚
       β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”Όβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜
                      β–Ό
                 Reliability
                      β”‚
                      β–Ό
                  Scalability
                      β”‚
                      β–Ό
               Production Quality

I believe software should be:

Maintainable β€’ Secure β€’ Scalable β€’ Reliable β€’ Performant β€’ User-Centered

Security should be considered during architecture and development β€” not added only after the product is built.


🌐 Connect With Me

Email Instagram Medium TikTok X

πŸ“§ Email: abdulkarimumar86@gmail.com


πŸ’» Tech Stack:

JavaScript TypeScript React React Native HTML5 TailwindCSS Figma Canva C++ Python
Anaconda Qt Socket.io Streamlit Apache MySQL Postgres Matplotlib NumPy Pandas Plotly scikit-learn Scipy TensorFlow Git GitHub Postman Linux Ubuntu CentOS 7

πŸ“Š GitHub Stats:



πŸ” Top Contributed Repo



Build with purpose. Engineer with discipline. Secure by design.

Pinned Loading

  1. my-portfolio my-portfolio Public

    A personal portfolio built with React and TypeScript to showcase projects, technical skills, and a contact form. Responsive, accessible, and optimized for easy deployment.

    TypeScript 1

  2. convenientshop convenientshop Public

    Desktop application for convenient shop build with Python and CustomTkinter

    Python 2 1

  3. online-video-store online-video-store Public

    Online Video Store

    PHP 1

  4. weather-telegram-bot weather-telegram-bot Public

    Telegram Weather Bot using Python, PostgreSQL, and OpenWeatherMap API.

    Python 1

  5. remote-interview-platform remote-interview-platform Public

    JavaScript