Hamed
Mohamed.
Full-Stack Engineer. Node.js & React. Focusing on Application Security and Performance.
Hamed Mohamed helps clients build websites, landing pages, dashboards, backend APIs, QR attendance systems, and secure full-stack web applications using React, Next.js, Node.js, and PostgreSQL.
About Me
Full-Stack Engineer.
Node.js & React.
I'm Hamed, an Egyptian Full-Stack Engineer and Computer Engineering graduate (GPA 3.5/4.0), based in Turkey. I build production web systems — from university platforms serving 2,000+ students to multilingual restaurant websites with ~100 daily visitors.
Recently, I helped ship a high-throughput QR attendance platform for 2,000+ students across 7 faculties. We managed to cut the response latency by 98% while keeping the system highly available using circuit breakers.
My Philosophy
I don't build WordPress themes and I don't ignore edge cases. I care deeply about data integrity, system resilience, and treating security as a feature, not an afterthought. When I'm not writing APIs, I'm hunting for vulnerabilities in open-source tools like NodeSecure.
My Core Stack (Honest Opinions)
Node.js
Fast I/O. I love it, but I use strict linting to avoid spaghetti.
PostgreSQL
My go-to database. Data integrity is better than NoSQL hype.
Redis
Mandatory for rate-limiting and caching. Saves the DB from melting.
React
Great ecosystem, but I keep renders strictly controlled.
Backend Engineering
I build APIs and backends that scale. I focus on keeping latency low, database queries efficient, and the architecture clean.
Application Security
Security shouldn't be an afterthought. I write custom AST checkers, find SSRF vulnerabilities, and integrate security directly into the CI/CD pipeline.
System Resilience
Servers go down and networks fail. I use circuit breakers and automated fallbacks to make sure the system stays up even when things go wrong.
Career & Experience
Experience
Full-Stack Software Developer
AI & Digital Transformation Unit · Tokat, Turkey
- Primary Developer in a 3-member team — built QR Attendance System serving 2,000+ users across 42 courses, 13 departments & 6 faculties
- 98% latency reduction (94.91ms → 1.53ms) and +6,100% throughput (10.54 → 653.39 req/s)
- Implemented Opossum Circuit Breaker for automated recovery during peak traffic
- Executed data migration of 25,019 academic records (14,100 courses, 50 faculties, 259 programs)
- 313 automated tests across 38 test suites · SAST/DAST CI/CD · 18 security findings remediated
Freelance Full-Stack Developer
Kardeşler Kebap & Cafe Cihangir · Istanbul, Turkey
- Designed and built a production digital restaurant platform from scratch using Next.js 16, React 19, and Supabase — replacing an outdated WordPress site
- Implemented 10-language support with dynamic routing, covering Turkish, English, Arabic, Russian, French, Persian, German, Italian, Spanish, and Chinese
- Built live currency conversion (6 currencies) and direct WhatsApp ordering with automated localized messages
- Executed full WordPress migration with 25+ redirect rules preserving Google rankings
- Implemented comprehensive Local SEO: Schema.org (Restaurant, Menu, ImageGallery), hreflang for 10 languages, Open Graph, and dynamic sitemap
- Built owner admin panel allowing non-technical restaurant owner to update prices and availability in real-time
Open Source Contributor
NodeSecure Ecosystem · Remote
- 7 merged PRs across js-x-ray & scanner repositories
- Built insecure-random probe (flags Math.random() misuse) — PR #452
- Improved localhost/SSRF detection in shady-url checker — PR #462
- Added sensitivity option (conservative/aggressive) across AstAnalyser — PR #456
- Built benchmarking infra with mitata to track AST baselines — PR #496
Education
B.Sc. Computer Engineering
Tokat Gaziosmanpaşa University, Turkey · GPA 3.5/4.0
QR Attendance System
Production QR attendance system serving 2,000+ users across 42 courses, 13 departments & 6 faculties. 98% latency reduction (94.91ms → 1.53ms). +6,100% throughput. 313 automated tests across 38 test suites. 18 security findings remediated.
💡 Behind the code:Lesson Learned: High throughput requires aggressive caching. I had to rip out the original DB queries and rewrite them to use Redis.
Kardeşler Cihangir — Restaurant Platform
Production digital platform for a 28-year-old Turkish restaurant in Cihangir, Istanbul. Built with Next.js 16 & React 19. Supports 10 languages, live currency conversion for 6 currencies, direct WhatsApp ordering, owner admin panel, and comprehensive Local SEO with Schema.org. Migrated from legacy WordPress with full 301 redirect coverage. Serving ~100 real daily visitors.
💡 Behind the code:Lesson Learned: Building for a real business means real constraints — an owner who doesn't code, tourists who don't speak Turkish, and Google rankings that directly affect revenue. SEO and UX aren't optional extras; they're the actual product.
NodeSecure OSS Contributions
7 merged PRs to the NodeSecure ecosystem. Built insecure-random probe, improved SSRF detection, added configurable sensitivity modes and performance benchmarking.
💡 Behind the code:Lesson Learned: AST analysis is incredibly powerful but resource-intensive. Writing efficient recursive tree walkers is harder than it looks.
DragonSploit
AI-powered vulnerability scanning with intent-based orchestration engine. Dynamic strategy selection gives ~40% efficiency gain. Stack-detection module cuts false-positive alerts by 70%.
💡 Behind the code:Lesson Learned: AI engines can hallucinate vulnerabilities. The real challenge was building a deterministic validation layer to verify the AI's claims.
Technologies
My Stack
Languages
Frontend
Backend
Security & DevOps
Writings
Latest
Articles
Get in Touch
Let's build
something secure.
If you need someone to fix your backend performance, secure your infrastructure, or build a scalable system from scratch, send me an email.
curl -X POST https://api.web3forms.com/submit \
-H "Content-Type: application/json" \
-d '{"message": "Let's build something."}'