Mahmudul Hasan
Available for Contracts (40+ hrs/wk) ⚡ Forward Deployed AI Engineer 🛡️ Vulnerability Researcher

Mahmudul Hasan

Forward Deployed AI Engineer & Senior Systems Architect

10+ years of engineering across frontier AI model evaluation (OpenAI, Anthropic, Gemini, DeepSeek), binary & Android reverse engineering, embedded IoT microcontrollers (ESP8266/ESP32, RP2040), mobile architectures (Swift, Kotlin, Flutter/Shorebird), and bare-metal distributed Linux infrastructure. Bridging legacy hardware to agentic AI workflows with 100% first-pass evaluation compliance.

📄 Download Resume (PDF) ✉️ mahmudul8296@gmail.com 💻 @bdlogicalerror 🔗 /in/bdlogicalerror

Core Specialization Pillars

01 PILLAR

Frontier AI Model Evaluation & Model Context Protocol (MCP)

Frontier AI & RLHF

Comprehensive evaluation of frontier reasoning models (GPT-4o, o1, o3-mini, Claude 3.7 Sonnet, Gemini 2.0 Pro, DeepSeek R1/V3, Llama 3.3) with Model Context Protocol (MCP) production servers, complex SWE-bench multi-file code auditing, and pairwise RLHF preference verification sustaining >85% What/Where/Why cognitive action density under strict anti-silence standards.

Model Context Protocol (MCP) OpenAI (o1 / o3-mini / GPT-4o) Claude 3.7 Sonnet / Opus Gemini 2.0 Pro DeepSeek R1 / V3 Meta Llama 3.3 SWE-bench Evaluation RLHF Preference (>85% Action Density)
02 PILLAR

Forward Deployed Engineering (FDE) & Enterprise AI Integration

Enterprise FDE

Turnkey Forward Deployed AI architectures bridging legacy customer hardware (CCTV/DVR/NVR systems, raw RTSP/ONVIF streams, embedded sensors) into live agentic AI workflows. Engineered DVRify (real-time video ingestion via go2rtc WebRTC + pgvector spatial search) and enterprise hybrid RAG pipelines with automated API-UI contract verification.

DVRify Video AI SaaS go2rtc WebRTC Gateway Portkey AI Gateway Hybrid RAG (pgvector 384-dim + BM25) RTSP / ONVIF Ingestion FastAPI Backend Next.js 15 / 16 UI Enterprise FDE Integration
03 PILLAR

Vulnerability Research, Reverse Engineering & Adversarial AI Red-Teaming

Security & Reversing

Deep binary, Android bytecode, and network protocol reverse engineering. Decompiled complex obfuscated applications (JADX, Baksmali, Ghidra), intercepted live session tokens via Frida runtime hooks, decomposed legacy Triple-DES (DESede) ciphers, executed raw 802.11 Layer-2 frame injection, and orchestrated adversarial LLM red-teaming (TAP/FlipAttack).

Android Smali & JADX Decompilation Frida Dynamic Hooks & Stalker Ghidra / IDA Native Reversing (.so) Triple-DES & AES Cryptanalysis 802.11 Layer-2 Frame Injection AI Safety Red-Teaming (TAP / FlipAttack) 9Router Gateway Testbed
04 PILLAR

Embedded Systems, Microcontrollers & IoT (ESP8266, ESP32-C3, RP2040 Pico, LoRa, BLE)

Hardware & RF

Low-level firmware engineering across Espressif and Raspberry Pi SoCs. Built the RP2040 Pico USB HID Hardware Stealth Relay (synthesizing physical electrical USB bus signals with dual-Gaussian typing physics to bypass kernel event taps), BikeGuard (LoRa SX1278 433MHz 2-10km long-range RF + Apple Find My BLE), and custom ESP8266 lwIP NAPT network bridges.

RP2040 Raspberry Pi Pico ESP32-C3 SuperMini (RISC-V) ESP8266 lwIP NAPT Bridge LoRa SX1278 (433MHz RF) Apple Find My (OpenHaystack BLE) MPU6050 EXT0 Interrupt Wake CoreAudio HAL Darwin Daemons
05 PILLAR

Systems Programming & High-Level Languages (Rust, Go, Python, C++, Swift, Kotlin, Java, TypeScript)

Polyglot Systems

Multi-paradigm production engineering spanning systems and native platforms: Rust (memory-safe systems, Tauri v2), Go (high-concurrency networking, microservices), Python (AsyncIO, FastAPI, Scikit-learn), C++ (11/14/17 embedded firmware), Swift (iOS native CoreBluetooth/CMMotion/CoreAudio), Kotlin & Java (Android persistent services/GATT/JNI), and TypeScript (React 19/Next.js 15).

Rust (Tauri v2) Go / Golang Python (AsyncIO / FastAPI / PyTorch) C++ (11/14/17 Firmware) Swift (iOS Native CoreBluetooth / CMMotion) Kotlin & Java (Android Native GATT / JNI) Flutter & Dart 3.11 (Shorebird OTA) TypeScript & React 19 / Next.js PHP (Laravel) SQL (PostgreSQL / pgvector)
06 PILLAR

Distributed Cloud Infrastructure & Bare-Metal Worker Clusters (Docker, Celery, Suricata, go2rtc, pgvector)

Bare-Metal & Ingress

Production bare-metal Linux infrastructure supervising 30+ containerized microservices: distributed Celery background worker queues, Redis, Flower monitoring, Suricata Network Intrusion Detection (IDS/IPS), ntopng traffic analysis, go2rtc streaming gateway, and Cloudflare Zero-Trust edge ingress tunnels without open firewall ports.

Bare-Metal Linux Node Docker & Docker Compose Celery Distributed Worker Queues Redis & Flower Monitoring Suricata Network IDS/IPS ntopng Real-Time Traffic Cloudflare Zero-Trust Edge macOS launchd SSOT (57 Daemons)

Verified Production Lab & Compute Infrastructure

Workstation & Local Inference

Workstation
Apple Silicon MacBook Pro (macOS Sequoia) with calibrated multi-display matrix.
Local AI Inference
vLLM, Ollama, DeepSeek R1/V3, and Qwen 2.5 local execution environments.

Bare-Metal Distributed Worker Cluster

Cluster Architecture
Bare-metal high-availability Linux node hosting 30+ production containers.
Worker & Media Services
Celery task queues, Redis, Suricata Network IDS/IPS, go2rtc WebRTC gateway, and Portkey AI gateway.

Microcontrollers & Embedded IoT Lab

Microcontroller SoCs
ESP32-C3 SuperMini (RISC-V), ESP8266 NodeMCU/D1 Mini, RP2040 Raspberry Pi Pico.
RF & Sensor Mesh
Semtech SX1278 LoRa 433MHz, MPU6050 6-DOF, Apple Find My BLE, and GPS NEO-6M.

Studio Audio & Edge Ingress

Studio Telemetry
GK74 Pro studio microphone with native CoreAudio HAL zero-polling hardware lock.
Zero-Trust Edge
Cloudflare Zero-Trust tunnels routing production apex domains without open ports.

Production Systems & Engineering Deliverables

DVRify — AI Smart Video Surveillance SaaS

Forward Deployed AI (FDE)

Turnkey Forward Deployed AI pipeline transforming any legacy CCTV/DVR/NVR hardware into an intelligent monitoring SaaS. Ingests RTSP/ONVIF streams via go2rtc WebRTC gateway, executing live person/face detection, PostgreSQL + pgvector spatial vector search, and automated real-time alert dispatching.

Python FastAPI go2rtc WebRTC PostgreSQL / pgvector RTSP / ONVIF Next.js 15 Docker Compose

VeloTrack — IoT Telemetry & Vehicle Fleet Platform

Mobile & DSP

Production offline-first vehicle telemetry platform spanning Flutter 3.x, Dart 3.11, Shorebird 2.0 OTA instant code push, and native Swift/Kotlin platform channels. Embedded a real-time 10-50Hz Goertzel DSP frequency classifier to differentiate motorcycle engine combustion from pedestrian movement, passing 121 unit/widget tests.

Flutter 3.x / Dart Shorebird OTA Swift CoreBluetooth Kotlin GATT Goertzel DSP PostGIS

Bare-Metal Distributed Worker Node & Ingress Mesh

Bare-Metal Cluster

Self-hosted high-availability bare-metal Linux cluster hosting 30+ production containers: Celery distributed worker task queues, Redis, Flower monitoring, Suricata Network IDS/IPS, Portkey AI Gateway, Model Context Protocol (MCP) servers, and zero-trust Cloudflare edge ingress tunnels.

Bare-Metal Linux Docker Compose Celery / Redis / Flower Suricata IDS/IPS Portkey AI Gateway Cloudflare Tunnels

RP2040 Pico USB HID Hardware Stealth Relay

Hardware & Anti-Detection

Microcontroller hardware synthesizer (RP2040 CircuitPython/TinyUSB) spoofing Apple Magic Keyboard descriptors. Generates electrical D+/D- bus signals with dual-Gaussian neuromuscular latency (μ=110ms) and cubic Bézier mouse paths to bypass kernel-level synthetic automation event taps (kCGEventSourceStateHIDSystemState).

Raspberry Pi Pico (RP2040) CircuitPython TinyUSB Gaussian Biometrics macOS Kernel Taps

BikeGuard — Long-Range IoT Anti-Theft Hardware

IoT & RF Protocols

Motorcycle anti-theft hardware system (ESP32-C3 SuperMini, SX1278 LoRa 433MHz, MPU6050, GPS NEO-6M). Features 2-10km long-range RF alarms without cellular subscriptions, Apple Find My OpenHaystack BLE beacons, and deep-sleep external interrupt wake drawing only 0.3-0.5mA.

ESP32-C3 SuperMini LoRa SX1278 (433MHz) Apple Find My BLE MPU6050 EXT0 Wake Flutter Companion

apkLab & Binary Security Analysis Suite

Reverse Engineering

8-stage automated Android reverse engineering pipeline (JADX, APKTool, Frida, Ghidra) across 39 specialized agent specifications. Audits native .so boundaries, decomposes legacy Triple-DES (DESede) ciphers, and inspects white-box crypto (KonaWbc).

Python 3.12 JADX / Baksmali Frida Dynamic Hooks Ghidra Triple-DES Cryptanalysis Smali

ESP8266 802.11 Layer-2 Pentest & lwIP NAPT Bridge

802.11 & Firmware

Embedded C++ firmware for Espressif SoCs executing raw 802.11 management frame transmission (wifi_send_pkt_freedom, deauth, beacon floods, captive portal) alongside dual-mode lwIP NAPT routing to intercept, patch 88-byte token headers, and stream isolated IoT camera video.

ESP8266 C++ lwIP NAPT Raw 802.11 Injection DNS Hijacking RTP Streaming

Android Monitor (amon) Remote Administration

Android Internals

Agentless Android remote monitoring and telemetry suite operating over ADB shell (USB, TCP/IP, SSH). Dual-engine screen streaming utilizing RFB (VNC) dirty-rectangle updates and MJPEG with automatic zero-CPU idle termination when clients disconnect.

Python 3.9+ ADB Protocol RFB / VNC Synthetic Touch Injection Device Telemetry

HackAgent AI Red-Teaming Gateway

AI Red-Teaming

Adversarial evaluation gateway executing Tree of Attacks with Pruning (TAP) and semantic polarity inversion (FlipAttack) across multi-model judge pipelines to test LLM alignment and safety boundaries deterministically against enterprise gateway infrastructure.

Python 3.12 Enterprise AI Gateway Tree of Attacks (TAP) FlipAttack Jailbreak Evaluation

Hybrid Vector Memory & Semantic Retrieval Pipeline

Vector Search & RAG

Sub-10ms hybrid semantic search pipeline in Python and PostgreSQL + pgvector. Ingests unstructured dialogue on 5-minute ticks, generating 384-dimensional dense vectors on CPU via ONNX Runtime (Xenova/gte-small) with a 50% vector + 30% FTS + 20% importance rank.

PostgreSQL pgvector ONNX Runtime FastAPI Knowledge Graphs

Frontier Model Evaluation & Quantitative STEM Deliverables

AI Evaluation & STEM

Production evaluation deliverables including Credit Default Risk Scoring (ROC-AUC 0.94), SaaS Churn Hazard Modeling ($2.92M ARR portfolio analysis), Fleet Fuel Telemetry (350 vehicles, 8.26M miles), and Kubernetes Pod Resource Optimization, maintaining >85% What/Where/Why cognitive action density.

RLHF Pairwise CoT Auditing SWE-bench Python Pandas Scikit-learn Monte Carlo VaR

Shikho Mobile High-Scale EdTech Platform

Cross-Platform Mobile

High-scale cross-platform mobile application delivering low-latency interactive educational video streaming, student-parent code linking, and high-concurrency offline assessment sync with robust state management.

Flutter Dart Provider Video Streaming Offline Sync