Md Mahfuj Hossain
Web Developer • Full-Stack Web Applications • Next.js, WordPress & Business Systems
Over four years in IT infrastructure and support, now building production websites and web applications with Next.js, React and WordPress for real clients — alongside ongoing MSc research in cyber forensics.
AI
Neural Synthesis
Bio-Digital Core
Bachelor of Information Technology from Lincoln University College, Kuala Lumpur, Malaysia. Nov 2022 – Jul 2025.
HTML5, CSS3, JavaScript, PHP and MySQL via an Ernst & Young-delivered program certified by George Washington University, plus a web design program through BASIS.
Master of Science, Information and Communication Technology (Cyber Forensics track), at Universiti Teknikal Malaysia Melaka (UTeM). Dec 2025 – Jan 2027, in progress.
IT infrastructure, support and web development experience across Malaysia and Bangladesh. Bengali (native), English (professional working proficiency).
Neural Synthesis
Builder of CTI-Shield — a lifecycle-wide evaluation and mitigation framework for trustworthy AI in cyber threat intelligence, combining an 8-agent analysis pipeline, hybrid retrieval, hallucination guardrails, trust scoring, STIX 2.1 export, and a reproducible research harness.
Cyber-Physical Forensics
Researching CTI-Shield as part of an MSc in cyber forensics at UTeM: an eight-agent pipeline that runs on local LLMs to collect threat data, extract indicators of compromise, and triage incidents without sending anything to external APIs.
RESEARCH_FOCUS
Autonomous Threat Hunting
CTI-Shield is a lifecycle-wide research framework for trustworthy AI in cyber threat intelligence, combining an 8-agent analysis pipeline, hybrid retrieval, hallucination guardrails, trust scoring, STIX 2.1 export, and a reproducible evaluation harness.
open_in_new View Research ProjectWeb Architectures
Scale • Resilience • Fluidity
MediaBrust
Designed the WordPress + Elementor website for this web design and digital marketing agency, and built sites for some of its clients, including Enzenius Global.
La Finesse
Built and maintain a WordPress + Elementor site for a premium medical-aesthetics studio in Bern, Switzerland. The client experience is in German, with booking handled through an external Treatwell integration.
Expat Hospitals
Maintained this medical-tourism directory, connecting international patients with hospitals in Malaysia, during my IT Support role at Expat Services.
Latent Space Narratives
Mission Log
Professional Experience
Independent Web Developer
Self-Employed · Remote, based in Malaysia
Design and build responsive, production websites and web applications for clients across education, academic publishing, B2B food export and personal-care sectors, using Next.js, React, WordPress and Elementor.
- ▸ Built The EduWave and PUMA Solutions Global, Next.js/Prisma education-consultancy platforms — EduWave with a tiered agent-commission engine and QR-verified invoicing on MySQL, PUMA with a database-driven, admin-controlled multilingual system on the same core architecture.
- ▸ Delivered ThesisPublisher.my, a NestJS + Next.js academic-publishing platform on PostgreSQL with Elasticsearch search and an automated reviewer-reassignment workflow — the most structurally complex build in the portfolio.
- ▸ Built Khandani Foods, a Next.js/Supabase B2B export catalog with a compliance registry across four markets and a live llms.txt feed for AI search, and La Finesse, a WordPress/Elementor site integrated with third-party booking.
- ▸ Delivered Amsterdam Canal Painting (Wix) and IELTS & OET by Hasnat, a full admin CMS built on browser localStorage instead of a server database, with runtime-configurable email settings and 25 custom vocabulary games.
IT Support
Expat Services (Kuala Lumpur) Sdn Bhd · Kuala Lumpur, Malaysia
- ▸ Provided first-line technical support for hardware, software and network issues; installed, configured and maintained computers, printers and routers.
- ▸ Managed user accounts, email access and data permissions across company systems; ran backups and supported recovery.
- ▸ Supported project implementations and website maintenance, and coordinated with vendors for repairs and equipment upgrades.
IT Support Assistant
Applied Materials Limited · Dhaka, Bangladesh
- ▸ Handled hardware and software troubleshooting and repair, keeping company IT systems running.
- ▸ Maintained digital marketing campaigns across Facebook, Instagram and Google in support of business growth.
Outbound Call Center Agent
Universe IT · Dhaka, Bangladesh
Client intake, verification and service-quality support — before web-development training began. Included here for an unbroken timeline, not technical relevance.
Academic Core
Education
Bachelor's Degree in Information Technology
Lincoln University College · Kuala Lumpur, Malaysia · EQF Level 6
Training Programs
Web Development Training
Web Development Program
Ernst & Young LLP (India), BCC LICT Project · certified by George Washington University, USA
- ▸ HTML5, CSS3, JavaScript, responsive and cross-browser design; Bootstrap and jQuery; introductory React/Angular concepts.
- ▸ PHP and MySQL fundamentals, server-side scripting, database connectivity and CRUD operations.
- ▸ WordPress/CMS introduction, Git/GitHub version control, and Agile/SDLC basics.
Web Design Program
BASIS — Bangladesh Association of Software and Information Services
- ▸ HTML5, CSS3, JavaScript and jQuery, Bootstrap.
- ▸ Graphic design aesthetics and software project management fundamentals.
Strategic Deployments
Deployed Production Mainframes
ThesisPublisher.my
Academic publishing platform covering 45+ research disciplines. A NestJS API and Next.js 16 frontend on PostgreSQL (60+ models), with Elasticsearch search and an automated reviewer-reassignment workflow for overdue manuscripts.
The EduWave
Next.js/Prisma/MySQL platform helping Bangladeshi students apply to Malaysian universities. Includes a tiered agent-commission engine with a full audit trail, QR-verified PDF invoices, and 12-currency pricing.
La Finesse
WordPress + Elementor build for a premium medical-aesthetics studio in Bern, Switzerland, with a German-language client experience and booking handled through an external Treatwell integration.
MediaBrust
WordPress + Elementor website for a web design and digital marketing agency, covering its service catalog, portfolio gallery and a Calendly-based consultation booking funnel.
Enzenius Global
Overseas education and visa consultancy site built through MediaBrust, connecting students with 600+ partner universities across New Zealand, the UK, USA, Canada, Australia and Malaysia.
Expat Hospitals
Medical-tourism directory connecting international patients with accredited hospitals and end-to-end care coordination in Malaysia.
Amsterdam Canal Painting
Wix-built site for a Van Gogh-inspired painting-workshop business in Amsterdam, with a workshop-booking flow and an online shop for original canal paintings.
IELTS & OET by Hasnat
Online exam-preparation platform for IELTS and OET candidates. A full 19-panel admin CMS built on browser localStorage instead of a server database, with runtime-configurable email settings and 25 custom vocabulary-matching games.
Khandani Foods
Next.js/Supabase B2B catalog for a Bangladesh-based food exporter, with a compliance registry across four export markets, a request-a-quote workflow with automatic email fallback, and a live llms.txt feed built for AI answer engines.
PUMA Solutions Global
Free study-abroad consultancy platform connecting students with 200+ partner universities across 30+ countries. Next.js/Prisma platform with a database-driven, admin-controlled multilingual system instead of static translation files.
Mac Illy Global
Corporate portal unifying a multi-brand group in Kuala Lumpur, spanning salon, retail, student recruitment, IT & development, repair and franchise divisions under one site.
McKinney Lawn Pro
WordPress site for a lawn-care and landscaping company in McKinney, Texas, with a service-request booking form, neighborhood-by-neighborhood service listings and an FAQ/pricing section.
Qhaaf Bedding
Shopify storefront for a Pakistan-based bedding and home-textiles retailer, with a full product catalog, cart and checkout, and collections organized by thread count and material.
KHAS Stores
Shopify storefront for a Pakistan-based fashion and home-goods retailer, with seasonal collections, a loyalty-points program and order tracking across Women's, Men's, Kids' and Home categories.
Case Studies
7 Verified, Live Deployments
ThesisPublisher.my
Academic publishing platform covering 45+ research disciplines: journal articles, books and conferences, for a Malaysia-based publisher.
Researchers needed a structured way to submit, review and publish manuscripts with enforced deadlines and transparent status tracking. The result is a Turborepo monorepo: a NestJS API on PostgreSQL (60+ Prisma models) behind a Next.js 16 frontend, with manuscripts, revisions, reviewer assignments and editorial decisions modeled as separate, auditable tables. Overdue reviews get reassigned to another reviewer automatically, and a dedicated Elasticsearch module handles search across journals, articles and books.
The EduWave
Education-consultancy platform facilitating admissions for Bangladeshi students into Malaysian universities, under a university-partner-funded model so students apply for free.
Agents scattered across Bangladesh needed fair, tiered commissions instead of one flat rate, and a way to prove an invoice was genuine. Built as a Next.js/Prisma/MySQL platform with a five-role RBAC system and an agent-commission engine that snapshots each agent's rate the moment it's earned, so a later tier promotion never rewrites past payouts. Every commission invoice is a server-rendered PDF stamped with a QR code a bank can scan to verify it against the live database.
PUMA Solutions Global
Free study-abroad consultancy, Jakarta-based, connecting students with universities across 30+ countries on a university-partner-funded, zero-cost-to-student model.
Same underlying architecture as The EduWave — Next.js, Prisma, NextAuth v5 — but PUMA's hard problem was different: serving content in multiple languages, decided at runtime by a non-technical admin, without a redeploy every time a market opens. Translations live in the database instead of static JSON files, with an admin-controlled list of active locales and destination/subject browsing, scholarship matching and an agent-recruitment program layered on top.
Khandani Foods
B2B exporter of plant-based food products from Bangladesh (rice, snacks, cold-pressed oils, spices) selling to wholesale importers in Saudi Arabia, the UAE, Malaysia and the EU.
International buyers need product specs, compliance documentation (SFDA, JAKIM, Dubai FIRS, EU FIC) and a way to request quotes, without a consumer-style checkout. Built on Next.js 16 and Supabase (PostgreSQL with row-level security), with a two-tier compliance registry, an inquiry pipeline that falls back to a backup email API if the primary SMTP send fails, and a live /llms.txt feed so AI answer engines can cite accurate product data directly.
La Finesse
WordPress and Elementor build for a premium medical-aesthetics studio in Bern, Switzerland.
The client experience is fully in German, with appointment booking handled through an external Treatwell integration rather than a custom-built system. Good evidence of CMS delivery, client-facing design work, and third-party API integration — not custom application development, but a real, live client site with real bookings.
Amsterdam Canal Painting
Wix-built site for a Van Gogh-inspired painting-workshop business in Amsterdam.
Delivered on a no-code platform: a workshop-booking flow and an online shop for original canal paintings, plus the content and structure around them. Not custom development, but a full, real client delivery from content to booking flow — the kind of work a client actually pays for and uses every week.
IELTS & OET by Hasnat
Online exam-preparation platform for IELTS and OET candidates, built for a single instructor managing courses, videos, blog posts and custom vocabulary games himself, without calling a developer for every update.
Rather than sell a single-owner site a managed database it didn't need, the whole CMS runs on a versioned, custom CRUD layer built on the browser's own localStorage — a 19-panel admin dashboard covering courses, videos, blogs, testimonials and more, plus a runtime-configurable SMTP settings page and 25 vocabulary-matching games generated by a Python build pipeline. The site's own footer still credits the build directly: "Designed & Developed by Md Mahfuj Hossain," linking back to this portfolio.
Training & Core Skills
Formal Training + Working Skill Set
Web Development Program
- ▸ Ernst & Young LLP (India), BCC LICT Project — certified by George Washington University, Sep 2017 – Mar 2018
- ▸ HTML5, CSS3, JavaScript, Bootstrap, jQuery, intro React/Angular
- ▸ PHP, MySQL, CRUD, WordPress/CMS intro, Git/GitHub
Web Design Program
- ▸ BASIS (Bangladesh Association of Software and Information Services), Jul – Nov 2017
- ▸ HTML5, CSS3, JavaScript/jQuery, Bootstrap
- ▸ Graphic design aesthetics, software project management
Frontend
- ▸ HTML5, CSS3, JavaScript
- ▸ React (fundamentals), Next.js
- ▸ Responsive, cross-browser design
Backend & Data
- ▸ Node.js via Next.js server-side rendering & API routes
- ▸ PHP, MySQL, CRUD operations
- ▸ RESTful concepts
CMS & Platforms
- ▸ WordPress, Elementor page builder
- ▸ Wix (no-code business sites)
- ▸ Shopify (e-commerce storefronts)
IT Infrastructure & Security
- ▸ Systems administration, network troubleshooting
- ▸ User account & access management, backup/recovery
- ▸ Cybersecurity-aware operations
Initialize Uplink
Ready to collaborate? Whether it's web development, AI engineering, or cybersecurity consulting — transmit your message below.