- Built and deployed an enterprise Purchase Requisition workflow for 20+ users using Next.js, TypeScript, REST API routes and MS SQL Server, implementing role-based approval routing, audit history and database-backed business logic.
- Integrated Microsoft Entra ID SSO using OIDC/JWT and implemented CSRF/origin validation, CSP and HSTS for application security; documented production requirements covering DNS, TLS and firewall configuration.
- Presented the completed system to the IT President and CTO and received a 48/50 mentor evaluation.
Nakul Kokate
Pune, Maharashtra | +91 82374 77330 | kokatenakul11@gmail.com | linkedin.com/in/nakul-kokate | github.com/Naks-bro
Professional Summary
Computer Science & IT (Cyber Security) undergraduate graduating in 2027, CGPA 9.0/10, with internship, freelance and volunteer experience building enterprise applications, REST APIs and workflow automation. Develop full-stack systems with Python, TypeScript, React/Next.js and SQL/PostgreSQL; implement access controls, data-integrity checks and deployment documentation. Apply Claude Code and AI-assisted development to engineering workflows, with projects in ransomware detection and AI-assisted investigation.
Technical Skills
Languages: Python, C#, TypeScript, JavaScript, SQL, Bash, PowerShell
Web & APIs: React, Next.js, FastAPI, .NET 8, Node.js, REST APIs, JSON, HTML5, CSS3, OAuth 2.0/OIDC, JWT
Databases: PostgreSQL, MS SQL Server, SQLite, schema design, indexing, database functions, Row-Level Security (RLS)
Cloud & DevOps: AWS (IAM, S3, CloudTrail), Azure Entra ID, Docker, Docker Compose, Git, GitHub, CI/CD, Linux
Infrastructure & Security: TCP/IP, DNS, TLS, firewalls, Windows internals, ETW, WMI, endpoint telemetry, monitoring, security fundamentals
Engineering & AI Tools: API integration, automation, debugging, testing, technical documentation, Claude, Claude Code, prompt engineering, AI-assisted development
Work Experience
- Built the Arkoun Operations Portal with Next.js, TypeScript and PostgreSQL/Supabase for orders, subscriptions, inventory, dispatch and invoicing; documented build covered 101 app/API routes and 9 roles.
- Implemented Row-Level Security, server-side authorization, transactional inventory updates and idempotent payment recording; debugged policy-recursion and database-integrity issues.
- Automated WooCommerce order processing, vendor purchase orders and subscription scheduling with Google Apps Script; documented architecture and operational handoffs.
- Built the YGPT Event Management System using Next.js, TypeScript and PostgreSQL/Supabase, with 8 documented roles and 8 main lifecycle states covering event approvals, budgets, reporting and access control.
- Integrated Google Drive folder automation and email notifications through authenticated Apps Script webhooks and a Resend fallback; deployed on Vercel and maintained stakeholder workflows.
- Managed nationwide operations data and access; resolved credential exposure through key rotation and application hardening, and completed a database-region migration with zero data loss.
- Investigated enterprise endpoint security using Cortex XDR and Qualys; identified a critical endpoint privilege-escalation path and documented reproduction, impact and remediation for 2 global teams.
Projects
- Built a Windows service fusing 7 live telemetry signals across file activity, process behaviour, crypto API usage and network activity into a per-process 0–100 risk score.
- Combined decoy files and entropy analysis with automated process suspension, process-tree termination, execution restriction and scan triggering; mapped detections to MITRE ATT&CK T1486, T1490 and T1071.
- Built an investigation prototype with FastAPI REST APIs, PostgreSQL and Next.js for ingestion, 9+ entity types and cross-case search; used NetworkX for graph analysis and Docker Compose for local development.
- Integrated optional Claude CLI and Gemini analysis grounded in loaded case records, with human review of extracted claims; maintained API, database and architecture documentation.
- Built a Python scanner covering 4 AWS services — IAM, S3, EC2 and CloudTrail — to check security configurations and produce structured findings with CSV reporting and a Streamlit dashboard.
Education
- Relevant Coursework: Data Structures & Algorithms, DBMS, Operating Systems, Computer Networks, Web Technologies, Cloud & IoT
Achievements
DY Patil CTF 2024: Ranked 5th of 700+ participants (Top 0.7%)
Bharat Innovation Challenge 2025–26: Top 50 nationally
Smart India Hackathon 2026: Selected in college internal round
Responsible Disclosure: 3 security disclosures acknowledged by enterprise and academic organizations