Mahshooq Zubair | Software Engineer & Security Researcher

About me

Software engineer with a focus on development and cybersecurity, specializing in ethical hacking and advanced problem-solving. Skilled in research and development, complex software design, and addressing technical challenges. Seeking to collaborate on projects that drive technological innovation and professional growth.

Download Resume

Professional Experience

Applied Informatics Solutions Pvt. Ltd.

Senior Software Engineer

Apr 2025 - Present | Remote

Optimize application performance and improve system design across existing applications.
Improve developer experience through internal tooling and workflow automation.

CyberHeals

Senior Software Engineer

Sep 2024 - Mar 2025 | Remote

Software Engineer

Oct 2023 - Sep 2024 | Chennai, India

Led full-stack development of security products within a microservices architecture.
Isolated vulnerability scanning in containerized Celery workers, offloading processing from the main application.

Zennode Technologies

Junior Software Engineer

Jul 2022 - Sep 2023 | Calicut, India

Designed and built a multi-tenant SaaS architecture, ensuring high scalability and tenant isolation.
Led a team of four engineers, guiding technical decisions and improving code quality.

View all experience

Projects

Connect

Apr 2025 - Present | TrialX

Enterprise Patient Recruitment Management System.

Contribute to a Django-based patient recruitment platform supporting clinical-trial discovery and recruitment workflows.
Optimize application performance and refine system design, improving platform efficiency and maintainability.

Truzta

Oct 2023 - Mar 2025 | CyberHeals

AI-Driven Compliance Automation and Security Platform.

Integrated security compliance, penetration testing, and source code review tools into a unified system.
Implemented cloud security automation using AWS Lambda and CloudFormation.

R3C0Nizer-v2

Jan 2022 - Present | Open Source (InitCrew)

A workflow orchestration tool for Pentesters and Bug Hunter.

Developed a highly customizable security scan orchestration tool, enabling pentesters to define custom workflows.
Enabled distributed scanning, supporting multi-system execution for faster results.

View all projects

CVEs & Blogs

CVE-2024-12880 - RAGFlow

Mar 2025 | CVE

Partial Account Takeover due to Insecure Data Querying in infiniflow/ragflow

Reported a partial account takeover vulnerability caused by insecure data querying.

CVE-2023-36809 - Kiwi TCMS

Aug 2023 | CVE

Stored cross-site scripting in Kiwi TCMS

Credited as a reporter for a stored cross-site scripting vulnerability.

Multi-Tenancy in Flask

Jan 2024 | Blog

Schema-per-tenant SaaS architecture using Flask and PostgreSQL

A practical guide covering tenant provisioning, authentication, database migrations, and request-level schema switching, with accompanying source code.

About me

Download Resume

Professional Experience

Applied Informatics Solutions Pvt. Ltd.

Senior Software Engineer

Apr 2025 - Present | Remote

Optimize application performance and improve system design across existing applications.
Improve developer experience through internal tooling and workflow automation.

CyberHeals

Senior Software Engineer

Sep 2024 - Mar 2025 | Remote

Software Engineer

Oct 2023 - Sep 2024 | Chennai, India

Led full-stack development of security products within a microservices architecture.
Isolated vulnerability scanning in containerized Celery workers, offloading processing from the main application.

Zennode Technologies

Junior Software Engineer

Jul 2022 - Sep 2023 | Calicut, India

Designed and built a multi-tenant SaaS architecture, ensuring high scalability and tenant isolation.
Led a team of four engineers, guiding technical decisions and improving code quality.

View all experience

Projects

Connect

Apr 2025 - Present | TrialX

Enterprise Patient Recruitment Management System.

Contribute to a Django-based patient recruitment platform supporting clinical-trial discovery and recruitment workflows.
Optimize application performance and refine system design, improving platform efficiency and maintainability.

Truzta

Oct 2023 - Mar 2025 | CyberHeals

AI-Driven Compliance Automation and Security Platform.

Integrated security compliance, penetration testing, and source code review tools into a unified system.
Implemented cloud security automation using AWS Lambda and CloudFormation.

R3C0Nizer-v2

Jan 2022 - Present | Open Source (InitCrew)

A workflow orchestration tool for Pentesters and Bug Hunter.

Developed a highly customizable security scan orchestration tool, enabling pentesters to define custom workflows.
Enabled distributed scanning, supporting multi-system execution for faster results.

View all projects

CVEs & Blogs

CVE-2024-12880 - RAGFlow

Mar 2025 | CVE

Partial Account Takeover due to Insecure Data Querying in infiniflow/ragflow

Reported a partial account takeover vulnerability caused by insecure data querying.

CVE-2023-36809 - Kiwi TCMS

Aug 2023 | CVE

Stored cross-site scripting in Kiwi TCMS

Credited as a reporter for a stored cross-site scripting vulnerability.

Multi-Tenancy in Flask

Jan 2024 | Blog

Schema-per-tenant SaaS architecture using Flask and PostgreSQL

A practical guide covering tenant provisioning, authentication, database migrations, and request-level schema switching, with accompanying source code.