+ Head of Software Development & Cyber Security @ PIPWISE Broker
+ 18 years in IT, from network infrastructure to software platforms
+ Web, native iOS/Android and cross-platform mobile, shipped to both app stores
+ BSc Computer Science (Linnaeus University, Sweden) + Network Security specialization
+ ACS-assessed Software Engineer (ANZSCO 261313, Skill Level 1)
+ I build, break, secure, and automate, then teach others how it worksSenior full-stack architect with deep roots in cyber security, fintech/trading infrastructure, and AI-driven workflow automation. I lead the modernization of brokerage operations, turning manual dealing-desk rituals into real-time pipelines across MT5, CRM, risk engines, PSP payments, and prop/copy/PAMM systems.
I travel the world for work and studies, ship production systems end-to-end, and treat every vulnerability as a puzzle waiting to be solved.
$ tail -f current_work.log- π Building: Fintech CRM, AI risk scoring, prop trading platforms, copy/PAMM systems, MT5 API bridges, PSP gateways
- π€ AI & Agents: LLM pipelines, RAG systems, agentic automation, local/on-prem models, AI-powered risk & CRM intelligence
- π‘οΈ Securing: VAPT, AI-assisted pentest automation, WAF/DDoS mitigation, incident response, OWASP-aligned hardening
- βοΈ Automating: RabbitMQ pipelines, blockchain watchers, Telegram dealing bots, CI/CD, deployment orchestration
- π± Always learning: because uninvented stuff is still out there
- π― Open to collaborate on meaningful FOSS when the sprint calendar allows
- β€οΈ FOSS believer: who isn't? Right? :D
Integrating AI into production fintech & security systems, not demos. Turning manual dealing-desk, risk, CRM, and pentest workflows into intelligent, automated pipelines.
| Domain | AI-Powered Systems |
|---|---|
| Fintech / Trading | Client behavior analysis, toxic-trader detection, anomaly scoring, CRM intelligence over thousands of records, operational alerting |
| Automation | Agentic workflows, LLM-driven task pipelines, document/report generation, API orchestration, workflow digitization |
| Security | AI-assisted VAPT, automated recon & analysis, threat pattern detection, security hardening recommendations |
| Infrastructure | Local/on-prem LLM deployment, RAG over private data, vector search, model routing, observability & guardrails |
Native and cross-platform applications shipped to both stores, plus the pipeline that builds, signs, and publishes them.
| Layer | What I work with |
|---|---|
| Cross-platform | React Native with a shared JavaScript/TypeScript codebase across iOS and Android |
| Native Android | Java, Kotlin, Android SDK, Android Studio, Gradle |
| Native iOS | Swift, Xcode |
| Release pipeline | Fastlane, Jenkins, code signing, keystores, provisioning profiles, certificates |
| Distribution | Google Play Console, Apple App Store Connect, TestFlight beta channels |
| Integration | REST APIs, push notifications, offline storage, crash & analytics reporting |
Built a tool equivalent to Roman Nurik's Android Asset Studio and wired it straight into CI/CD, so every build generated its own assets from a single source image:
- Full Android density set (
mdpithroughxxxhdpi) plus adaptive icons - Complete iOS
AppIconcatalogue at@1x,@2x,@3xwith a validContents.json - Launcher icons, notification icons, and splash assets generated at build time
- Removed a manual design-to-developer handoff that had to be repeated on every single release
This is the practical core of the published thesis: Automating the monotonous workflow.
| Pattern | Where it shows up |
|---|---|
| Microservices | Bridge, Crypto Payment Solution, Forex Broker CRM |
| Event-driven / MQ | RabbitMQ quote distribution, BullMQ blockchain watchers |
| API Gateway + HMAC | PSP gateways, signed payment request pipelines |
| Multi-tenant SaaS | Bridge broker isolation, subscriptions, feature flags |
| REST + WebSocket | CRM, copy trading, prop data endpoints |
| Clean / layered arch | Inversify use-cases across Express backends |
| Dockerized production | Full-stack compose, Caddy TLS, PM2 clusters |
| RAG + Vector search | Private knowledge bases, semantic CRM/risk data retrieval |
| LLM agent pipelines | Multi-step automation, tool calling, workflow orchestration |
| AI risk & scoring | Anomaly detection, behavioral analysis, real-time alerting |
Production systems I've architected, built, and secured across ~150 repos.
| Project | Stack | What it does |
|---|---|---|
| Bridge | NestJS, Next.js, MongoDB, Redis, RabbitMQ, Docker | Multi-tenant broker bridge for MT4/MT5/FIX β liquidity providers |
| Forex Broker CRM | Next.js, Express, MongoDB, MT5 Web API, Python, Wine | Full broker CRM with real-time MT5 sync & client intelligence |
| Prop System | Express, Next.js, MongoDB, Firebase | Prop trading platform with evaluations, violations, drawdown rules |
| Copy Trading | Express, Next.js, WebSocket, MongoDB | Master-follower copy engine with configurable risk filters |
| PAMM System | Express, Next.js, MT5 equity/PnL | Allocation logic, performance fees, investor dashboards |
| Risk Management | Express, Next.js, MongoDB | Toxic client detection, anomaly scoring, real-time alerts |
| AI Risk & CRM Intelligence | LLMs, RAG, local models, Python | Client behavior analysis, automated scoring, operational intelligence pipelines |
| Project | Stack | What it does |
|---|---|---|
| Crypto Payment Solution | Express, ethers, tronweb, BullMQ, Redis | Self-custody crypto gateway with EVM/TRON watchers |
| PSP Integrations | Express, PM2, Nginx, PostgreSQL, Bull | Multi-PSP deposit/withdrawal proxy, reconciliation, and crypto gateway middleware |
| MT5 Prop Data | Express, RabbitMQ, WebSocket | Prop trading data API with message queue pipeline |
| Copy Trading CLI | Python, MT5Manager, MetaTrader5 | Manager API to terminal copy trader (urgent client rescue) |
| Project | Focus |
|---|---|
| Automated Incident Response | Forensic archive of a compromised CRM breach investigation, blockchain evidence |
| Margin Call Telegram MT5 | MQL5 EA + Telegram bot for multi-terminal margin alerts |
| MT5 Proxy Enforcement | Trading platform access control & proxy hardening |
| Security research repos | BYOB, TheFatRat, btcrecover, OWASP ZAP workflows for ethical research & red-team tooling |
| Infrastructure & Network Ops | Out-of-band management (HP iLO, Dell iDRAC, KVM over IP, managed PDUs, Wake-on-LAN), Cisco/MikroTik configuration, Ubiquiti airMAX point-to-point links, CCTV with NVR/DVR |
π Academic & Early Projects Linnaeus University (2015β2021) & foundational learning
These shaped the fundamentals: OOP, networking, databases, and first deployments. Small repos, big lessons.
| Era | Projects | Tech |
|---|---|---|
| 2015β2017 | Linnaeus Courses Part 1: Yahtzee, BoatClub, server admin | Java, Maven, PHP |
| 2018β2019 | Android apps: Flag Quiz, Photo Frame, Chinese Ebook, Creature Game | Java, Android SDK |
| 2018β2020 | Blackjack (Java/C#), SQLite-DB, Assembly micro-controller | Java, C#, C, ASM |
| 2019β2020 | REST BookStore API, NodeJS Login, AJAX Quiz, thesis report | Node.js, HTML/JS |
| ~2022 | av222gx examinations & exercises | Node.js |
| Side projects | Chess (Android/React/Web), Persian Dates, Responsive HTML | React, Java |
π Published research: Mobile application development and deployment (DiVA), CI/CD thesis at Naviga/Infomaker
2011 βββ IT Infrastructure @ STNJ (Dubai) βββ Cisco/MikroTik, Ubiquiti airMAX PtP, iLO/iDRAC, CCTV, racks
2016 βββ Code Hub Manager @ Kodkollektivet (Sweden) βββ Django community platform, workshops, speaking
2017 βββ Thesis Research @ Naviga βββ Mobile CI/CD, Fastlane, automated asset generation (published)
2018 βββ System Developer @ Ericsson βββ Java, Python, Groovy, Jenkins, Spring Boot, AWS
2019 βββ System Developer @ Contribe AB βββ React Native, Swift, Kotlin, architecture, security analysis
2021 βββ Software Developer @ Megaminers βββ ERP, accounting automation, IT leadership
2023 βββ Head of Software Dev & Cyber Security @ PIPWISE βββ Fintech platforms, MT5, AI risk, VAPT
2025 βββ Featured Speaker @ CyberX Summit & Awards (Muscat, Oman)
| Event | Role | Where | When |
|---|---|---|---|
| CyberX Summit & Awards 2025, 26th Global Edition, Oman | Featured Speaker | Grand Millennium Hotel, Muscat | Nov 2025 |
| Kodkollektivet Kalmar | Code Hub Manager & Speaker | Kalmar, Sweden | 2016β2018 |
Two years running a student programming community in Sweden, still speaking at industry events today. Explaining a system is how you find out whether you actually understand it.
| Credential | Issuer |
|---|---|
| BSc Computer Science | Linnaeus University, Sweden |
| AS Computer Science + Network Security | Linnaeus University, Sweden |
| Object-Oriented Programming with Java | Coursera |
| RESTful API with HTTP and JavaScript | Coursera |
| Web Application Security Testing with OWASP ZAP | Coursera |
| IBM Cybersecurity Fundamentals | Coursera / IBM |
| SQL for Data Science | Coursera |
| Bash Shell Scripting | Coursera |
| CompTIA Network+ | CompTIA |
| Mentor Certificate, Hackathon SΓDRA | Hackathon SΓDRA |
| Assessment | Authority | Code / Result | What it means |
|---|---|---|---|
| Educational Credential Assessment (ECA) | World Education Services (WES) | 4-Year Bachelor + 2-Year Diploma, Computer Science | WES is designated by Immigration, Refugees and Citizenship Canada (IRCC) to verify foreign degrees. My Swedish qualifications were assessed and confirmed equivalent to completed Canadian post-secondary credentials |
| Migration Skills Assessment | Australian Computer Society (ACS) | ANZSCO 261312, Developer Programmer | Positive assessment. Interprets specifications & technical designs, builds, maintains, tests, and documents software application code. |
| Migration Skills Assessment | Australian Computer Society (ACS) | ANZSCO 261313, Software Engineer | Positive assessment. Designs, develops, modifies, documents, tests, implements, installs, and supports software applications and systems. Skill Level 1, AQF Bachelor with ICT major equivalent confirmed. |
| Migration Skills Assessment | Australian Computer Society (ACS) | ANZSCO 261399, Software and Applications Programmers nec | Positive assessment. Covers ICT programming roles not elsewhere classified under other ANZSCO 2613 codes: design, develop, test, maintain, and document program code per user & system specifications. |
Languages: English (Full Professional) Β· Swedish (Professional Working) Β· Persian/Farsi (Native)
Portfolio: softwarepower.ir: full experience, projects, articles, and resume






