Farhan Rashid

Co-Owner & Lead Engineer @ Nexis365

Feb 2024 – Present

Top contributor on the platform. 134 commits, 74,986 lines added. I own security end-to-end and ship production backend code on the core NDIS product.

Security

• Built cloud and application security foundations on AWS, including access control, encryption at rest and in transit, monitoring baselines, and security configuration standards across all environments
• Embedded secure SDLC into engineering workflows with automated SAST/DAST scanning, threat modelling sessions, and pre-merge security gates
• Reduced critical vulnerabilities on the public-facing attack surface to zero through systematic vulnerability management and continuous monitoring
• Led SOC 2 and ISO 27001 readiness. Authored security policies, trust centre materials, and handled enterprise customer security questionnaires
• Built incident response plans and runbooks, then ran tabletop exercises to validate recovery procedures

Engineering (16 PRs in 4 days)

• Resolved 3 critical SCHADS Award payroll defects: rewrote the midnight boundary calculation so overnight shifts split correctly on UTC servers, replaced broken public holiday detection with timezone-safe date-range queries, and fixed overtime logic that was double-billing at 275% instead of the correct 150% rate
• Hardened the NDIS invoicing pipeline by surfacing missing-rate shift IDs that were previously causing silent data loss, replacing per-shift database lookups with batched queries, and adding proper validation for invalid NDIS item codes
• Removed 251 lines of dead code from duplicate endpoint handlers and consolidated everything into a single canonical endpoint with schema validation, database transactions, and AI incident detection
• Created a paginated, filtered, role-gated audit events endpoint that enforces immutability by design. You cannot delete an audit record. The API returns 405.
• Bootstrapped the entire testing framework from zero coverage. Installed Vitest, configured coverage tooling, and wrote 32 unit tests for invoicing helpers and haversine distance calculations
• Authored "Constitution" end-to-end tests that verify system invariants: financial values stored as whole numbers, timestamps always server-generated, audit logs permanently immutable

Datacenter Operations Engineer @ Amazon Web Services

Jul 2023 – Feb 2024

Infrastructure operations on the physical layer that runs AWS. Rack-down incidents, 30-minute SLA response windows, hands on the hardware. The job I woke up genuinely excited for.

• Responded to rack-down and server failure incidents under 30-minute SLA targets, diagnosing and resolving Linux server and networking equipment failures across live datacenter infrastructure
• Performed firmware upgrades and configuration updates on production routers, switches, and operating systems under strict change-control processes with zero tolerance for unplanned downtime
• Executed secure sanitization and decommissioning of storage media and network devices including HDDs, SSDs, and switches, meeting AWS compliance and data destruction requirements
• Managed trouble tickets prioritised by severity and impact, maintaining high availability across datacenter operations
• Assisted the security team in physical penetration testing exercises against datacenter access controls and perimeter security

Cyber Security Analyst @ Dana Fintech

Dec 2022 – Apr 2023

• Authored the enterprise-wide cybersecurity policy from scratch, covering access control, data classification, incident response protocols, and acceptable use across the entire organisation
• Sole owner of the FAIR-U quantitative risk assessment. Identified threat scenarios, modelled loss event frequencies and magnitudes, and delivered dollar-denominated risk reports that drove remediation prioritisation across the business