Usama's work across fintech, marketplaces, cybersecurity, loyalty, and AI — client systems and my own products. Most is private org work, so it's described honestly rather than linked.
All projects
Security / Open sourceown product
shorproof
A post-quantum readiness scanner for JavaScript and TypeScript, published on npm. It finds the cryptography that Shor's algorithm breaks — RSA, ECDSA, JWT/JWKS, PEM/X.509 — and points at the NIST replacements (ML-KEM, ML-DSA).
Built and maintained solo. Binding-aware static analysis so findings survive review by a cryptographer instead of drowning teams in false positives; SARIF 2.1.0 output for GitHub code scanning and a CycloneDX 1.6 cryptographic BOM; two runtime dependencies, CI-gated, unit-tested.
A digital wallet and neobank used across several countries — accounts, transfers, cash-in/out, cards, and KYC, plus a business side for merchants.
Core backend engineer. Built the authentication platform, a login security layer, the notification service, and a campaign engine; connected regional payment providers. On the business side I built Payment Way end to end — an API-first way for outside businesses to plug in (backend, merchant dashboard, and developer docs).
Node.jsTypeScriptMongoDBRedisBullMQAWSNext.js
Marketplaceown product
Car-Rental Marketplace
A peer-to-peer car-rental marketplace — hosts list vehicles, guests book them, with live chat and real-time booking updates.
Built entirely on my own — backend and website. Raw-SQL PostgreSQL data layer, real-time chat/presence/booking status, and background jobs. My clearest proof of full-stack ownership.
A multi-tenant platform that ingests alerts from several security tools and turns them into risk reports teams can act on.
Major author. Built the alert-ingestion pipelines and background workers, per-organization usage limits, and multi-language risk reporting.
Node.jsExpressMongoDBElasticsearchBullMQRedisAWS
Distributed systemscompany work
Notification Microservice
A standalone service that sends every email, SMS, push, in-app, and WhatsApp message for a fintech platform.
Lead author. Built it from scratch: a provider-abstraction layer with vendor fail-over, queue workers, retries/backoff, dead-letter handling, and PDF statements.