System Modules & Direct Access 🎯

Direct shortcuts to core architecture labs, live API terminal, and audit services.

OVERVIEW • ABU DHABI, UAE

Joudi Mohammad

Backend & Database Engineer • Application Security Specialist

I design bare-metal C# .NET 10 micro-frameworks, high-performance database architectures, and execute offensive security audits on production API endpoints. Specializing in N-Tier architecture generation, strictly typed ADO.NET execution, and OWASP IDOR mitigation.

Upwork Profile ↗ View Projects
01 / Engineering Philosophy

Who Am I & Technical Mindset

Core Expertise

With a background in Cybersecurity (Dean's List at Abu Dhabi University) and hands-on penetration testing experience, I build backend systems from a dual perspective: maximum runtime efficiency and total security immunity.

Available in Abu Dhabi, UAE Immediate Onboarding

Architectural Mindset

  • Bare-Metal ADO.NET Performance: I eliminate implicit data type conversions and plan recompilations by implementing strictly typed ADO.NET parameters over heavy ORM overhead.
  • Zero-Trust API Security: I audit API routes for OWASP Top 10 vulnerabilities (IDOR, Broken Access Control, Excessive Data Exposure) and build cryptographic defenses (PBKDF2/SHA256, Refresh Token Rotation).
  • Row-Level Tenant Isolation: Architecting database schemas with CompanyID tracking tokens to guarantee multi-tenant data boundary isolation at the database layer.
02 / Key Production Systems

Featured Projects & Software Solutions

Proprietary Core Engine (Private IP)

Zagros Scaffolding Tool

Enterprise .NET 10 Architecture Engine & Code Generator

Automated enterprise-grade CLI code generator (+6,000 lines of C#, 20+ classes) parsing live DB metadata across MS SQL, MySQL, and PostgreSQL to instantly scaffold a 4-tier Clean Architecture Web API solution (.NET 10) with Stored Procedures, DAL, BLL, DTOs, Controllers, JWT Auth, Multi-Tenancy, and Granular RBAC.

C# 13 / .NET 10 SOLID & 3 Design Patterns MS SQL / MySQL / Postgres PBKDF2 & JWT Refresh SaaS Multi-Tenancy
Production API & Desktop

DVLD Management System

Driving Licenses Management API & WinForms Desktop

Utilized the Zagros Scaffolding Tool engine to generate 12,443 lines of backend code, embedding 121 injected Stored Procedures and 120+ secure REST endpoints with transactional trace logging, IP rate limiting, and C# desktop companion.

.NET 10 REST API C# WinForms Desktop 121 Stored Procs Scalar OpenDocs
Relational Database Modeling

Enterprise Multi-Tenant CRM Schema

25+ Tables Schema with Row-Level Isolation

Architected a 25+ tables relational database schema enforcing Row-Level Tenant Isolation using global CompanyID tracking tokens across all transaction tables to guarantee physical multi-tenant data separation.

Relational Schema Row-Level Security SQL Triggers Data Isolation
03 / LIVE INTEGRATION TERMINAL

ASP.NET Core API Authentication & Token Tester

Live Auth Endpoint

Authentication & JWT Token Generation

POST request to Joudi's hosted ASP.NET Core Kestrel backend

Enter username & password (Default: joudi / joudi) to authenticate and generate a JWT Token directly from the endpoint:

POST /api/Auth/login
// Enter joudi / joudi then click "Get Token" to receive authentication token...
04 / Offerings

Engineering & Consulting Services

Backend API Architecture

Designing stateless, high-performance C# .NET 10 RESTful APIs and microservices using clean N-tier architectural patterns.

DELIVERABLES:
  • Custom C# backend services
  • JWT & Refresh Token rotators
  • OpenAPI / Scalar Documentation

Web Security & API Audits

Offensive penetration testing for REST endpoints, identifying OWASP vulnerabilities, IDOR flaws, and broken access controls.

DELIVERABLES:
  • Comprehensive Audit Reports
  • PoC Exploitation Scripts
  • Developer Patching Roadmaps

Database Design & T-SQL Tuning

Architecting normalized relational schemas, Row-Level Tenant Isolation, and tuning T-SQL queries for bare-metal execution.

DELIVERABLES:
  • Optimized Stored Procedures
  • Index & Execution Plan Tuning
  • Multi-Tenant Schema Migration

Full-Stack Web Development

Building end-to-end production web applications combining modern responsive frontends with secure C# .NET backends and robust databases.

DELIVERABLES:
  • Complete Custom Web Application
  • Secure Auth & Dashboard Setup
  • Cloud Deployment & Live Hosting

Technical Consultation & Advice

One-on-one technical consultation sessions for software architecture evaluation, code refactoring guidance, database review, and security advice.

DELIVERABLES:
  • 1-on-1 Consultation Session
  • Architecture & Code Review
  • Actionable Optimization Plan
05 / Technical Competencies

Tech Stack & Skill Set

Core Backend & .NET

C# 13 .NET 10 / 9 / 8 ASP.NET Core N-Tier Architecture RESTful APIs Stateless Web Architecture JWT Auth Async / Await

Database & Storage

Advanced T-SQL Oracle PL/SQL MS SQL Server 2022 PostgreSQL MySQL High-Perf ADO.NET SqlTransactions Row-Level Isolation Stored Procedures

Offensive Security & Testing

API Penetration Testing OWASP Top 10 IDOR Mitigations Source Code Auditing Broken Access Control Python Exploit Automation

Tools & Engineering

PBKDF2 / SHA256 Database Meta-Programming CLI Automation Engine Trace IDs Telemetry CORS Security Git / GitHub
06 / Experience Timeline

Professional Experience

Freelance Penetration Tester

IT Legend (Remote - Egypt)

Oct 2025 – May 2026
  • Executed manual penetration testing on production API endpoints; identified and mitigated critical Broken Access Control and IDOR vulnerabilities within internal API routes.
  • Prevented PII leaks of 1,300+ user records/emails by discovering excessive data exposure in Leaderboard APIs and securing front-end error logging pipelines.
  • Developed "Ultimate Harvester," a custom Python exploitation tool to automate data exposure validation and demonstrate real-world PoC impact.
  • Performed external infrastructure reconnaissance, identifying misconfigured administrative subdomains and exposed database ports (e.g., direct MS SQL 2022 access).
  • Authored detailed technical remediation reports directly for the CEO, translating complex flaws into actionable patching steps for core developers.
07 / Education & Credentials

Education, Certifications & Languages

Academic Education

B.Sc. in Cybersecurity (In Progress)

Abu Dhabi University • Abu Dhabi, UAE

Dean's List GPA: 3.4 / 4.0

Software Engineering Training

Advanced Software Engineering Track

Programming Advices Academy

N-Tier Architecture T-SQL Optimization C# .NET Core

Languages

  • Arabic Native
  • Kurdish Native
  • English Professional B2

Visa & Work Eligibility

Golden Visa Holder in the United Arab Emirates. Fully eligible for immediate onboarding with no visa sponsorship delays required.

Available for Remote / On-Site in UAE
08 / Client Endorsements

Professional Recommendations

“I had the pleasure of working with Joudi, who conducted a security review of my website and identified several important vulnerabilities. What stood out the most was his honesty and integrity — he was transparent, clear, and focused on delivering real value... His attention to detail and ability to uncover meaningful issues were truly impressive. I highly recommend him to anyone looking for a reliable and skilled security professional.”
Ali Shahin
CEO at IT Legend (via LinkedIn Endorsement)
09 / Direct Communication

Get In Touch

Have a C# .NET architecture project, a database performance challenge, or need an API security assessment? Send a message directly.

Direct Email

joudi.adeeb@gmail.com

Phone & WhatsApp

+971 554276817

Upwork Direct Contract

upwork.com/freelancers/~0110990d2c3ed41795 ↗

Verified Upwork Freelancer

GitHub Repositories

github.com/Joudi0 ↗

Sender Information
💡 Local numbers starting with 0 (e.g. 055..., 050...) will automatically convert to international format with UAE (+971) country code.
Project Overview

// Encrypted transmission pipeline. Ready for ASP.NET Core POST /api/v1/contact hook.