// OPERATOR CLEARANCE PROFILE

Operator Profile & Doctrine

// SYSTEM MANIFESTO OPERATOR VERIFIED

"I break web applications to learn how they fail, then build and harden them so they don't."

I am Sagar Biswas (known across security networks as Sagar MultiHAT): Software, AI & Security Engineer, SEO Expert, Exploit Developer, and MultiHAT Operator. Founder of MultiHAT.dev and the AIUB CyberSecurity & Programming Society in Dhaka, Bangladesh. Operating on an adversarial engineering mindset where offensive tradecraft directly informs rock-solid software architecture.

Base: Dhaka, Bangladesh Undergraduate: BSc in CSE, AIUB Agency Studio: MultiHAT.dev Student Leadership: AIUB CyberSecurity & Programming Society Founder Clearance Status: Available for Roles

5 Core Disciplines Verified Services Verifiable Deliverables Active Radar Open To Roles Direct Dispatch

// CORE COMPETENCIES

What I Do

A dual-discipline engineering practice bridging full-stack software development, applied artificial intelligence, technical search optimization, and adversarial security research.

DISCIPLINE 01 Full Stack

Software Engineering

Building resilient, type-safe web applications and high-throughput backend services. Specialized in modular microservice patterns, relational schema optimization, containerized environments, and seamless multi-channel payment integrations.

Next.js React NestJS Node.js TypeScript PostgreSQL Docker aamarPay bKash Stripe

DISCIPLINE 02 Intelligence

AI Engineering

Designing intelligent LLM-powered products, real-time conversational voice assistants, and defensive AI-assisted security tooling. Implementing multi-agent workflows, prompt injection guardrails, and dual-model consensus verification engines.

LLM Products Voice Assistants AI Security Tooling Dual-AI Consensus Prompt Defense Python

DISCIPLINE 03 Visibility

Technical SEO

Engineering web platforms for dominant search indexing and zero-latency crawler discoverability. Crafting automated semantic XML sitemaps, rich Local-Business JSON-LD schema, edge-rendered Next.js deployments, and sub-second Core Web Vitals.

Local-Business Schema Automated Sitemaps Edge Next.js Core Web Vitals JSON-LD Structured Data

DISCIPLINE 04 AppSec

Web Application Security

Conducting systematic OWASP Top 10 security audits, passive OSINT reconnaissance, attack-surface mapping, and threat modeling. Producing CVSS-scored forensic vulnerability reports with actionable engineering remediation guidance.

OWASP Top 10 Passive OSINT Attack-Surface Mapping CVSS-Scored Reporting Burp Suite Remediation

DISCIPLINE 05 Research

Exploit Development & Research

Deep vulnerability research and binary behavior analysis conducted strictly in authorized environments, isolated sandboxes, and competitive CTFs. Uncovering flaw root causes, memory corruption patterns, and evasion mechanics.

Authorized Labs CTF Competitions Binary Analysis Memory Safety MITRE ATT&CK Zero-Day Patterns

// SERVICE RECORD

Verified Client & Engineering Services

Production digital engineering studio operations, commercial client platforms, and enterprise clinical simulation architectures engineered by Sagar Biswas.

STAGE 01 GitHub ↗

MultiHAT.dev

Software, AI & security engineering studio: MultiHAT.dev is a digital agency for custom website and software development, integrations, upgrades, and maintenance. Builds are matched to the right architecture; upgrades are scoped and quoted before work begins; maintenance plans are tiered by support needs.

Engineering Studio Live Production

Software • AI • Security Visit Agency →

STAGE 02 GitHub ↗

Sydney Wheels & Tyres

A premium, high-performance static marketing website for Sydney Wheels & Tyres. Built with Next.js, TypeScript, and Tailwind v4, it features immersive UI animations, 3D tilt cards, automated sitemaps, and rich local business schema. Designed to maximize SEO discoverability, showcase auto services, and drive customer bookings in Campbellfield.

Commercial Client Live Production

Next.js • Tailwind v4 Live Site →

STAGE 03 GitHub ↗

FedUni Clinical EMR Simulator

Federation AUS, enterprise ASP.NET Core 8 & SQL Server EMR simulation platform built for clinical education. Features 14+ hospital modules: ADDS deterioration alerts, GCS Neurological, Braden & Fall Risk scoring, Regular/PRN MAR, IV & Fluid Balance, Food Intake, Victorian Maternity Record (VMR), RISKMAN OHS incident reports & supervisor lab resets.

Enterprise Simulation Health-Tech EMR

ASP.NET Core 8 • SQL Server Inspect Source →

// VERIFIABLE DELIVERABLES & OPEN ECOSYSTEM

Work You Can Inspect

Zero paper claims. Every system, research toolkit, and security audit is backed by verifiable code, live platforms, or documented proof across 33+ technical notebooks, 10+ security articles, 59+ production products, and 4 strategic roadmaps.

59+ Production Projects

33+ Research Notebooks

4+ Strategic Roadmaps

10+ Technical Blogs

1.7k+ GitHub Stars Earned

VAULT // NOTEBOOKS

Technical Field Manuals & Research Notebooks

Curated open-access technical notebooks across 9 core software engineering and cybersecurity disciplines: Web Application Security, Python, Linux & Bash, C/C++ Data Structures, JavaScript, React, PHP, NestJS, and Git workflows. Designed for deep study and rapid operator recall.

33+ Notebooks

Cybersecurity (5) Python (2) Linux & Bash (2) C/C++ DSA (5) JavaScript (8) Frameworks (4)

9 Series Explore Field Manuals →

VAULT // BLOGS

Research Transmissions & Security Dispatches

Tactical cybersecurity writeups, practical vulnerability teardowns, and defensive engineering guides. In-depth investigations breaking down Windows endpoint mechanics, network security analysis, Linux development workflows, and post-quantum cryptographic resilience.

10+ Articles

Windows & Endpoint (2) Network Security (3) Linux & DevTools (2) Culture & Cryptography (3)

4 Domains Read Transmissions →

VAULT // ARSENAL

Cybersecurity Arsenal & Strategic Roadmaps

Tactical security weaponry, authorized auditing platforms (PortSwigger Web Security Academy, OWASP ZAP, TryHackMe), and 4 master learning roadmaps, including the 60-week penetration testing track, The BlackHAT Roadmap, and 35-role career handbook.

4 Roadmaps

60-Week Pentest Track The BlackHAT Roadmap 35 Career Paths TryHackMe Labs PortSwigger Labs

Tactical Toolsets Explore Arsenal →

VAULT // PROJECTS

Production Projects & Systems Ledger

High-impact full-stack web platforms, applied AI models, and defensive security software with verifiable code. Features live production systems including MultiHAT Academy (Next.js 15 + NestJS 11), PhishGuard dual-AI consensus game, passive OSINT recon suites, and client platforms.

59+ Repositories

Defensive Security (25) Offensive & Recon (21) Research & Proposals (13)

Full-Stack & AI Inspect All Projects →

// ACTIVE RADAR

Now

Current operational focus, ongoing academic tracks, and engineering research priorities.

RADAR STATUS: ACTIVE Current Focus Stream // 24/7 System Telemetry // Dhaka, BD

Live Radar

01 // ACADEMIC Active

AIUB CSE Degree

BSc in Computer Science & Engineering at AIUB, advancing core foundations in operating systems, algorithms, distributed networks, and database internals.

Core CS Foundations

02 // APPSEC & AI Active

Web & AI Security

Sharpening web application penetration testing, AI agent security, defensive prompt guardrails, and adversarial model evaluation.

AppSec & AI Defenses

03 // HARDENING Active

Codebase Review

Conducting rigorous security audits and refactoring across previous production software and open-source releases to enforce zero-trust defaults.

Zero-Trust Refactoring

04 // TRADECRAFT Active

Novel Cyber Research

Investigating emerging offensive vectors, memory safety patterns, and defensive countermeasures strictly in isolated research labs.

Isolated Lab Exploits

// CLEARANCE DIRECTIVES

Open To

Available for software engineering roles, offensive or defensive security positions, AI agent implementations, internships, security-tooling collaborations, and client projects via MultiHAT.dev.

TRACK 01

Software Engineering Roles

Full-time or high-impact engineering roles building Next.js, React, NestJS, and TypeScript platforms with hardened security and scalable architecture.

View Executive Résumé →

TRACK 02

Offensive & Defensive Security Roles

Open to offensive (penetration testing, VAPT, exploit analysis) and defensive (AppSec, security hardening, threat modeling) engineering positions, AI implementations, or internships.

Initiate Engagement →

TRACK 03

Security-Tooling Collaborations

Partnering on open-source defensive security tools, OSINT automation, technical curricula, and specialized research papers.

GitHub Profile →

TRACK 04

Client Projects via MultiHAT.dev

End-to-end bespoke software engineering, technical SEO overhauls, payment gateway integrations, and comprehensive security hardening.

Visit Agency Studio →

// DIRECT DISPATCH CHANNELS SECURE DISPATCH

Whether you want to discuss a software engineering role, an offensive or defensive security position, an AI implementation, or an agency collaboration, reach out directly:

Primary Channel →

sagarbiswas@multihat.dev Direct Engineering Inquiries

Commercial Agency →

multihat.dev Client Solutions & Development

Live Dossier →

sagarbiswas-multihat.github.io Recruiter Proof War Room

Code Repositories →

github.com/SagarBiswas-MultiHAT 59+ Repos // 1.7K+ Stars

Professional Dispatch →

linkedin.com/in/sagarbiswas-multihat Industry Network & Updates

Community Leadership →

AIUB CyberSecurity & Programming Society Founder & Admin // Practical Workshops

Inspect Executive Résumé Document → Connect on LinkedIn →