Full-stack developer with a security mindset — I build products end to end, then test them the way an attacker would.
I build full-stack products end to end and test them the way an attacker would. Right now I work on infrastructure and networking as a Technology Intern at Kroll, and spend my own time on web and API security and bug bounty practice.
A few projects I designed and shipped. Each started as a real problem — so I owned them from data model to deployed UI.
Multi-modal plagiarism detection for educators
A full-stack platform and Chrome extension that checks text, code and images for plagiarism in real time, then returns a readable similarity report.
What I built — Designed the LangGraph + RAG pipeline, the Postgres schema and the Manifest V3 extension, and added prompt-injection guardrails around the AI calls.
AI storytelling + an artisan marketplace
A PWA pairing interactive AI storytelling with seller tools for artisans — chat, visual search, and AI-assisted product descriptions.
Grouped by how I actually use them — not a wall of logos. Strongest in full-stack product work and application security.
Internships
infra · web · security
Hackathon wins
1st place, 100+ teams
Certifications
cloud · security · AI
Finding and reasoning about how systems break.
Owning features from schema to deployed UI.
Building and securing LLM-powered features.
APIs, data models, and the auth around them.
Comfortable across the stack and the terminal.
Shipping and operating what I build.
Three internships across infrastructure, secure web development, and security research.
Technology Intern — Infrastructure & Networking
Supporting enterprise infrastructure and networking operations across cloud and on-prem environments.
Web Developer Intern
Built and shipped full-stack web applications with a focus on secure, reliable delivery.
Cybersecurity Research Intern
Hands-on security research across traditional web targets and LLM-based systems.
I don’t treat security as a separate hat. The same curiosity that makes me want to understand how a system works makes me want to know how it fails — and building with that in mind is what keeps the things I ship from quietly breaking later.
Before I trust a feature, I ask how it gets abused — bad input, broken access control, a token that outlives its purpose. Mapping the failure modes early is cheaper than patching them after launch.
User data, third-party APIs, even content scraped from a web page — none of it is trusted until it’s validated. That habit came directly from building AI features where prompt injection is a real threat.
Bug bounty work is mostly patient enumeration: what’s exposed, what assumptions the app makes, where the edges are. I automate the repetitive parts so I can spend attention on the interesting ones.
Auth, least privilege, and sane defaults belong in the first version, not a later hardening pass. Designing them in keeps the product simpler and the surface smaller.
I’m a final-year IT student who likes shipping things that actually work — and then figuring out how they break. Most of my projects start as a real problem I wanted solved, so I tend to own them from data model to deployed UI.
Security is what pulls me deepest. I’m drawn to understanding how systems fail — auth flows, APIs, access control, infrastructure — because knowing the failure modes makes me build sturdier products. I practise this through bug bounty methodology, recon automation, and the OWASP Top 10.
I’m early in my career and honest about that. What I bring is range, fast learning, and a habit of caring about the unglamorous parts: reliability, clear code, and security that’s designed in rather than bolted on. I’m looking for a team where I can contribute real work and grow quickly.
Nadipena Varunkumar
Full-stack developer with a security mindset
Hyderabad, India
B.Tech, Information Technology
AITAM, Andhra Pradesh · 2022 – 2026 · CGPA 7.78 / 10
Squash the red bugs, skip the teal decoys. 20 seconds on the clock.
Ready to hunt?
Red bugs are worth +1. Teal decoys are −2. Tip: turn on sound in the nav for the full effect.
Packet Run
You’re a data packet racing through the network. Jump the red threats, grab the tokens. It only gets faster.
Space / tap to jump · hold for a higher jump
I’m looking for internships, new-grad roles, and security-minded engineering work. If you’re hiring or want to collaborate, the fastest way to reach me is email — I reply quickly.