TRANSMISSION ORIGIN — NORTH YORK, TORONTO

RAGHAVJHA

I break systems on purpose so they cannot be broken by accident. Application security, firmware that runs in real time, and products shipped end-to-end — one stack, three disciplines.

VIEW MISSIONS OPEN CHANNEL

4REPOS UNDER SAST

TIER IIGOOGLE CASA

2027B.SE — SENECA

DESCEND

EPISODE III — THE SECURITY OF THE REALM

A NEW THREAT

It is a period of digital war. Fraudulent invoices move through the accounts payable systems of a thousand worlds, draining treasuries before anyone notices the signature is wrong.

From a seed-stage outpost called APTOSI, a founding engineer builds the countermeasures — static analysis that halts a corrupted pull request before it merges, authenticated scans that surface injection flaws before an adversary does.

Meanwhile, on the training worlds of SENECA POLYTECHNIC, he writes firmware that must answer in microseconds, and teaches neural networks to see what human reviewers miss.

Pursued by deadlines and compliance labs alike, he continues his work — because the perimeter only holds if someone keeps testing it...

PERSONNEL DOSSIER

FILE // JHA_R● LIVE

Third-year Software Engineering student at Seneca Polytechnic in Toronto, and a founding engineer at Aptosi — a seed-stage fintech fighting invoice fraud and verifying vendors.

My work sits where three disciplines overlap: application security (CASA Tier II assessments, authenticated DAST, SAST wired into CI so critical findings block the merge), embedded systems (FreeRTOS on NXP Kinetis, DMA-fed audio pipelines, sensor buses that cannot drop a sample), and full-stack product work (SvelteKit, TypeScript, Python, Firebase).

Originally from Himmatnagar, Gujarat. Currently operating out of North York, Toronto. Graduating 2027 and looking for the next system worth hardening.

OWASP ZAPSAST / DASTOAuth 2.0FreeRTOS SvelteKitFastAPITypeScriptPython PostgreSQLFirebaseGitHub ActionsDocker

VITALS

DESIGNATIONRaghav Jha
RANKFounding Engineer
POSTAptosi — Fintech
ACADEMYSeneca Polytechnic
SECTORToronto, ON
STATUSOpen to offers

THREAT ASSESSMENT

ARSENAL

◈ OFFENSIVE SECURITY

Application Security

DAST · OWASP ZAP

SAST in CI/CD

Email Auth — SPF/DKIM/DMARC

◈ EMBEDDED / FIRMWARE

FreeRTOS · Kinetis K66F

DMA · I2S/SAI Audio

I2C · SPI · UART

Sensor Integration (ToF, IMU)

◈ FULL-STACK

TypeScript · SvelteKit

Python · FastAPI

PostgreSQL · Firestore

Docker · GitHub Actions

◈ MACHINE LEARNING

CNNs · VGG16 Transfer Learning

CBAM Attention

RNN / LSTM

Reinforcement Learning

MISSION LOG

MSN-318 CRITICAL

OPERATION: CASA TIER II

Google Cloud security assessment · Aptosi

Drove Aptosi through Google's CASA Tier II compliance assessment end to end. Ran authenticated OWASP ZAP scans against production surfaces and surfaced HIGH-severity server-side template injection and SQL injection, plus a PII disclosure path. Wrote the formal assessment reports, coordinated with the external lab, and tracked every finding to remediation.

OWASP ZAP
SSTI / SQLi
Threat Reporting
Remediation

MSN-292SHIPPED

THE BLOCKADE

Automated SAST gate · 4 repositories

Wired Votal.ai static analysis into a GitHub Actions pipeline across all four Aptosi repositories. Critical findings now block the pull request rather than landing in a dashboard nobody reads — security moved from a quarterly audit to a merge-time contract.

GitHub Actions
SAST
CI/CD
Policy as Code

MSN-207ACTIVE

TRADE FEDERATION LINK

QuickBooks Online integration · OAuth 2.0

Built and hardened Aptosi's Intuit/QuickBooks Online integration — OAuth 2.0 authorization flows, launch and disconnect URLs, webhook subscriptions, and the migration onto Intuit's CloudEvents payload format. Accounts-payable data crossing a trust boundary, safely.

OAuth 2.0
Webhooks
Intuit API
Fintech

MSN-101BUILDING

CYRAVENT

AI-powered enterprise security platform

A multi-tenant security intelligence SaaS built milestone by milestone from a full engineering spec: Next.js + TypeScript front end, FastAPI + PostgreSQL + Redis backend, a provider-agnostic AI service layer, Docker throughout. Strictly defensive, with RBAC, audit logging, and tenant-isolation tests as first-class requirements.

Next.js
FastAPI
PostgreSQL
Multi-tenant
RBAC

MSN-600FIELD

REAL-TIME ACQUISITION

FRDM-K66F · FreeRTOS · bare-metal timing

Real-time data acquisition on NXP Kinetis hardware: ADC sampling under FreeRTOS with DMA-fed ring buffers, I2S/SAI audio output, and time-of-flight plus gyroscope sensors on I2C. The kind of code where a missed deadline is not a warning — it is a wrong answer.

FreeRTOS
DMA
I2S / SAI
C
Ring Buffers

MSN-044RESEARCH

SEEING MACHINES

CNNs · transfer learning · attention

Computer-vision work built on VGG16 transfer learning with CBAM attention blocks, alongside recurrent models and reinforcement-learning experiments. The half of my stack that guesses, sitting next to the half that must never guess.

VGG16
CBAM
LSTM
RL

HYPERSPACE ROUTE

2027
GRADUATION — B.SE
Bachelor of Software Engineering, Seneca Polytechnic, Newnham Campus.
2026
CASA TIER II + SAST GATE
Led Aptosi's Google CASA Tier II assessment; shipped merge-blocking static analysis across four repositories.
2026
CYRAVENT MILESTONE I
Public platform surface built and verified; FastAPI backend skeleton with RBAC and tenant isolation next.
2025
FOUNDING ENGINEER — APTOSI
Joined a seed-stage fintech building invoice fraud detection and vendor verification. Integrations, security, full-stack.
2024
EMBEDDED + ML DEPTH
FreeRTOS firmware on Kinetis hardware; CNN and attention-based vision research at Seneca.
2023
ARRIVAL — TORONTO
From Himmatnagar, Gujarat to North York. Software Engineering at Seneca begins.

OPEN A CHANNEL

SECURE COMMS● ENCRYPTED

Hiring for security, fintech, or anything with firmware in it? I answer fast.

SUBSPACEraghavnjhaa@gmail.com CODE ARCHIVEGitHub HOLONETLinkedIn RETURNTop of transmission

Swap the GitHub and LinkedIn URLs in index.html for your real profiles.

IMPERIAL TERMINAL● READY

jha@datanet:~$_

click, then type help