Portfolio: samarthbhatia.com · Computer Engineering + Business (International Trade), NTU Singapore

Full-stack engineer and AI-augmented security researcher building production fintech, portfolio-tracking, and cloud-security tooling in Go, TypeScript, and Python. Currently Product Lead at Money Pasar and IMDA-backed YouthTechSG Open Impact Fellow.

const samarth = {
    role:         "Full-Stack Developer | AI Security Researcher | Cloud & Network Security",
    location:     "Singapore 🇸🇬",
    website:      "https://samarthbhatia.com",
    current:      ["Product Lead @ Money Pasar", "YouthTechSG Open Impact Fellow (IMDA)"],
    education:    "Computer Engineering + Business (International Trade) — NTU Singapore",
    focus:        ["AI-Augmented Security", "Full-Stack Engineering", "Cloud & Network Security"],
    funFact:      "Led my darts team to Round of 8 with an undefeated group stage 🎯"
};

languages  = ["Go", "TypeScript", "Python", "Java", "C/C++", "SQL"]
frontend   = ["Next.js 16", "React 19", "Tailwind CSS v4"]
backend    = ["Go", "Node.js", "Express.js", "REST APIs", "NextAuth v5", "Supabase Auth (OAuth)"]
databases  = ["PostgreSQL", "Supabase", "MongoDB Atlas", "Firebase"]
ai_agents  = ["Anthropic API", "OpenRouter", "MCP", "Agentic Workflows"]
infra      = ["Docker", "Vercel", "AWS", "Terraform", "Git", "CI/CD"]
exploring  = ["AWS Security Specialty", "CompTIA Network+", "Blue Team / Threat Analysis"]

• 🥇 SummerBuild 2025 Gold Award — Trippy Find travel planning platform
• 🤖 Former QA Engineer @ Temus — Built AI automation reducing UAT test case drafting time by 50%
• 💼 Product Lead @ Money Pasar — Cross-border P2P fintech platform (Go, Next.js, MongoDB Atlas)
• 🌱 YouthTechSG Open Impact Fellow — IMDA-backed national open source programme (May–Oct 2026)
• 🛡️ NTU Cybersecurity Club — Threat analysis, penetration testing, and security research
• 🔒 Security-First Developer — RBAC, PDPA-compliant systems, DNS sinkhole, L2/L3 network isolation
• 🌐 Published on Chrome Web Store — 48.5K impressions, 737 installs, 3x weekly user growth
• 🗣️ Multilingual — English · Hindi · Spanish

📄 Full project list, resume, and contact card: samarthbhatia.com

Production-grade multi-asset, multi-currency portfolio SaaS — equities, ETFs, crypto, gold, bonds, real estate across multiple brokers with SGD base currency.

• FX-vs-asset gain decomposition — deterministic algorithm mathematically isolating currency movement from asset returns; absent in Moomoo, StocksCafe, Syfe
• Four-layer full stack — React Server Components for zero-waterfall load, Supabase Postgres with Row-Level Security enforced at PostgREST layer
• Dual-provider AI analyst — Anthropic claude-sonnet-4-6 with OpenRouter fallback, streamed over SSE, admin-toggled via feature flags; grounded on real 30-day sparklines to prevent hallucinated scores

Next.js 16 React 19 TypeScript Supabase Tailwind CSS v4 Anthropic API OpenRouter Vercel

Agentic auditor that scans AWS accounts for cost waste and security gaps, then generates Terraform remediations — built with Kiro IDE.

• Finds waste and security gaps across AWS resources automatically
• Generates Terraform remediations for each finding instead of just flagging issues
• Human-in-the-loop by design — every fix requires explicit approval before touching infrastructure

Python AWS Terraform Kiro IDE Agentic AI

Published Chrome theme extension — Manifest V3, full build and release pipeline.

• 48.5K impressions, 737 installs via organic Chrome Web Store growth — no paid promotion
• ~60 weekly users, up 3x from launch baseline
• Reusable Makefile pipeline for CRX packaging, OpenSSL signing, and version management

Chrome Extensions API Manifest V3 Shell Makefiles OpenSSL

Production REST API backend for travel planning — real-time flight and hotel data across 150,000+ properties.

• 20+ REST endpoints, Amadeus API integration, multi-destination route optimisation
• Security middleware (Helmet.js, CORS), health monitoring, response compression and caching

Node.js Express.js PostgreSQL Supabase Amadeus API JWT

Product Lead on SGD↔MYR FX optimization platform for cross-border transfers.

• Go payments backend integrating EurexaX API for cross-border transactions
• Production RBAC with NextAuth v5 — three permission levels (user, admin, superadmin)
• Database migration from Firebase to MongoDB Atlas with serverless-optimised connection pooling

Go Next.js 16 TypeScript MongoDB Atlas NextAuth v5 Docker Vercel

• NAS + Docker — containerised storage, backups, and self-hosted services
• Pi-hole DNS sinkhole — network-wide ad blocking, DNS query logging, traffic analysis
• macvlan networking — dedicated IPs per container, L2/L3 isolation, subnetting and VLAN concepts

Docker Linux Pi-hole macvlan DNS TCP/IP

• Blue team security — threat analysis, incident response, log forensics
• Cloud security architecture (AWS SAA → AWS Security Specialty)
• Network fundamentals deep dive (CompTIA Network+, OSI layers, routing protocols)
• LLM + security tooling — AI-augmented threat detection and SOC workflows

⚡ Fun fact: When not coding, you'll find me behind a camera, reading fiction, or practicing my dart throw.