Home

Ansar Shaikh

Software engineer: small services with the tests to back them

I write backend services and the test suites around them, and I like test automation that catches real defects rather than padding coverage.

Projects

  • 6/6 seeded defects caught

    api-qa-suite

    pytest and schemathesis suite for an API with 6 seeded defects: 9 failures on the vulnerable build, 28 of 28 passing on the fixed build, stable across repeated runs.

    • pytest
    • schemathesis
    • FastAPI
  • 25 tests, 0 failures

    spring-secure-api

    Incident-ticket REST API in Java 17 and Spring Boot 3 with JWT, RBAC and IDOR protection, tested with JUnit 5 and MockMvc.

    • Java 17
    • Spring Boot 3
    • JUnit 5
  • 24 tests pass

    secure-shortener

    FastAPI URL shortener with auth and rate limiting, where each control has a named test.

    • Python
    • FastAPI
    • SQLite
    • pytest
  • 501 requests, 0 errors

    bluegreen-deploy

    Blue/green deploys with GitHub Actions, Docker and Nginx, with an end-to-end test that switches versions under load.

    • GitHub Actions
    • Docker
    • Nginx
  • Expiring S3 share links

    AWS-S3-Storage-Client

    AeroVault: React and TypeScript S3 file manager with drag-and-drop uploads, previews and pre-signed share links.

    • React
    • TypeScript
    • AWS SDK v3

More on GitHub

chaos-kit · runbook-bot · llm-redactor

Skills

  • Languages: Python, Java 17, JavaScript, TypeScript, Bash
  • Frameworks: FastAPI, Spring Boot 3, React
  • Testing and delivery: pytest, JUnit 5, MockMvc, schemathesis, GitHub Actions, Docker, Git

2025 B.E. Information Technology, Sinhgad Institute of Technology & Science (SPPU), Pune, with Honours in Cybersecurity.

Experience

  • May – Jun 2024

    ServiceNow System Administrator, Virtual Intern · AICTE program

    Built ServiceNow reports and dashboards from incident and problem records, and completed labs on the platform's service catalog and knowledge base.

    • ServiceNow
  • Aug 2025 – Present

    CTF Player and Security Researcher · Hack The Box and TryHackMe

    Hack The Box and TryHackMe labs on Linux and Windows, which is where I learned to read other people's code for bugs.

    • Linux
    • Debugging

Certifications

  • Mar 2024

    Certified AppSec Practitioner (CAP)

    The SecOps Group · Credential ID 8481909

  • Feb 2024

    Microsoft Azure Fundamentals (AZ-900)

    Microsoft

Other roles: SOC analyst · Cloud security & DevSecOps · DevOps / SRE / NOC · AI security · VAPT & AppSec · Security (SOC, VAPT and AI security) · Writing