K.S

[SYS] Initializing core modules...

[NET] Establishing secure connection...

[GPU] Rendering pipeline active...

[OK_] All systems operational.

0%

KARIM SANGID

AI & Security Engineer
Founder, Hummus Development LLC

MS Computer Science @ George Mason University • Azure AZ-204 Certified.
Live Stripe marketplace, paid client web platforms, mobile AI app, self-hosted LoRA fine-tuning.

Scroll

I ship products,
not side projects.

0+ Lines of Code
0+ Projects Shipped
0 GitHub Repos
AZ-204 Azure Certified

22-year-old MS Computer Science student at George Mason University, based in McLean, Virginia. I run a one-person product studio under Hummus Development LLC: a live roofing-lead marketplace with Stripe and Twilio, multi-brand client web platforms shipped April 2026, a cross-platform AI dating app with custom LoRA fine-tuning on local hardware, and an AI-powered SIEM companion. Azure AZ-204 certified. US Citizen.

SELECTED WORK

01

Hummus IQ

AI Assistant

  • Local LLM with RAG, persistent memory & vision
  • 7-engine parallel web search
  • Real-time WebSocket streaming
  • Code execution sandbox
PythonFastAPIChromaDBOllamaSQLite
View on GitHub →
How does RAG improve accuracy?
RAG grounds responses in retrieved documents, reducing hallucination...
Search the web for latest benchmarks
Searching 7 engines in parallel...
02

RoofRoof.solutions

Live Roofing-Lead Marketplace — Stripe + Twilio + Supabase

  • 8,000+ line Express/Node + Netlify Functions stack
  • Live Stripe payments, custom coupon engine, admin refunds
  • Twilio SMS lead-blast + Meta Pixel/CAPI dedup
  • Supabase Postgres via PgBouncer pooler with RLS
Node.jsExpressNetlify FunctionsSupabaseStripeTwilioMeta CAPI
Visit roofroof.solutions →
ROOFROOF.SOLUTIONS
03

SentinelIQ

AI-Powered Security Log Analyzer

  • Ingests syslog, Windows Events, CEF & firewall logs
  • LLM embeddings for anomaly detection (3 methods)
  • Natural language querying of security data
  • Real-time dashboard with threat timeline
PythonFastAPIReactChromaDBOllamaAzureDocker
View on GitHub →

[03:14:22] INFO Syslog ingestion started on :514

[03:14:23] WARN Anomaly score 0.87 — src 10.0.0.45

[03:14:24] CRIT Brute-force detected — 142 attempts/min

[03:14:25] INFO Embedding vectors indexed: 24,891

[03:14:26] WARN Unusual port scan from 192.168.1.33

[03:14:27] INFO NLP query: "show failed logins last 24h"

[03:14:28] ALERT Lateral movement pattern identified

[03:14:29] INFO ChromaDB similarity search: 12 results

[03:14:22] INFO Syslog ingestion started on :514

[03:14:23] WARN Anomaly score 0.87 — src 10.0.0.45

[03:14:24] CRIT Brute-force detected — 142 attempts/min

[03:14:25] INFO Embedding vectors indexed: 24,891

[03:14:26] WARN Unusual port scan from 192.168.1.33

[03:14:27] INFO NLP query: "show failed logins last 24h"

[03:14:28] ALERT Lateral movement pattern identified

[03:14:29] INFO ChromaDB similarity search: 12 results

04

HummusOSINT

Open Source Intelligence Platform

  • Username search across 100+ platforms
  • Email breach detection (HIBP)
  • Domain recon (WHOIS, DNS, subdomains, SSL)
  • IP geolocation + port scanning & PDF reports
PythonFastAPISQLitednspythonpython-whois
Private Repository
05

Cram

AI Study Assistant

  • RAG-powered Q&A with source citations
  • Flashcard generation with SM-2 spaced repetition
  • Practice quizzes with LLM grading
  • Knowledge gap tracker
PythonFastAPIChromaDBOllamaSQLiteWebSocket
View on GitHub →
QUESTION

What is RAG in the context of LLMs?

ANSWER

Retrieval-Augmented Generation — combining LLM reasoning with external knowledge retrieval.

06

HummusLink

Cross-Platform Sync Bridge

  • Windows PC to iPhone real-time sync
  • File transfer, clipboard sync, text/photo sharing
  • PWA + system tray app
  • mDNS auto-discovery, QR code pairing
PythonFastAPIWebSocketPWAmDNS
View on GitHub →
PC
iOS
07

Wheaton Valet Cleaners

Paid Client Build — Next.js 16 Multi-Brand Site

  • Full Next.js 16 + Tailwind + Framer Motion rebuild
  • 5 brand pages incl. DOE Liberty Press federal launch
  • A-grade SEO — 12 JSON-LD schemas, chatbot 14/14 smoke
  • Live Resend email + Twilio SMS intake pipeline
Next.js 16React 19TailwindFramer MotionVercelResendTwilio
View live site →
Wheaton Valet
Dry Cleaning 2-day
Wash & Fold $1.85/lb
Alterations From $12
Schedule Pickup
08

FiveM Server Platform

Multiplayer Game Infrastructure & Development

  • Built & managed roleplay server with 143 custom vehicle mods and 150+ game resources
  • Developed 300+ Lua scripts (client/server architecture) for gameplay systems, economy, and inventory
  • Managed Linux dedicated servers — SQL databases, uptime monitoring, automated backups, DDoS protection
  • Led development team: deployment workflows, version control across 150+ resources, QA testing
  • Created custom 3D vehicle models, textures, LOD optimization, and streaming configuration
LuaC#JavaScriptSQLLinux3D ModelingServer AdminNetworking
Proprietary
SERVER CONSOLE

[OK] Starting resources...

[OK] 143 vehicles loaded

[OK] 150 resources mounted

[OK] SQL connected

[OK] 47 players online

> Server running on port 30120

09

Papi AI

Cross-Platform AI Wingman — Mobile + Backend + Custom LoRA

  • RN/Expo SDK 54 mobile app on EAS Update preview channel
  • Vercel FastAPI backend — Groq Llama 3.3 70B + Whisper
  • Self-hosted Qwen2.5-7B LoRA pipeline (Unsloth + WSL + 4060 Ti)
  • GGUF export served through local Ollama gateway
React NativeExpoFastAPIGroqUnslothLoRA / GGUFOllama
Private Repository
10

Local AI Gateway

OpenAI-Compatible API in Front of Personal Ollama

  • Bearer-auth HTTP gateway over Tailscale
  • /v1/chat/completions, /v1/embeddings, /v1/models
  • Foundation for fully local AI workflows
  • Windows Scheduled Task — runs on logon, 24/7
PythonFastAPIOllamaTailscaleBearer Auth
Private Repository

$ curl -H "Authorization: Bearer $KEY" \

    100.89.111.87:8089/v1/chat/completions

> |

CASE STUDIES

Four of the projects above, opened up. Architecture, hardest decisions, live operations, real incidents.

Live in production | Stripe + Twilio + Supabase

RoofRoof.solutions

Self-serve roofing-lead marketplace. Live Stripe payments, server-authoritative coupon engine, Meta Pixel + CAPI dedup, restoreSiteDeploy incident write-up.

8K+
LOC
11
DB tables · RLS
~28s
Push to live
Read the case study →
Multi-brand client rebuild | Federal-compliant launch

Wheaton Valet.

Five-brand Next.js 16 rebuild. Federal-compliant launch inside the U.S. Department of Education. Delivered, deployed, and signed off.

5
Brand pages
12
JSON-LD schemas
14/14
Bot smoke pass
Read the case study →
AI × Cybersecurity | ChromaDB + LLM embeddings

SentinelIQ.

AI-powered SIEM companion. Multi-format log ingestion (syslog / Windows Events / CEF / firewall), three independent anomaly-scoring methods, plain-English query engine.

4
Log parsers
3
Scoring methods
NL
Query engine
Read the case study →
Mobile + Backend + LoRA | RTX 4060 Ti at home

Papi AI.

Cross-platform AI wingman. React Native mobile + Vercel FastAPI on Groq + custom Qwen2.5-7B LoRA fine-tune lab on a local 16 GB GPU.

v2.9
Live mobile
7B
LoRA base
3
Stack layers
Read the case study →

TECH STACK

Languages

Python TypeScript JavaScript Java C# SQL Swift PHP Lua HTML5 CSS3 Bash PowerShell

AI / ML

RAG Pipelines LoRA Fine-Tuning Unsloth GGUF / llama.cpp LLM Integration Computer Vision Vector Databases Embeddings OpenCV ChromaDB Ollama Groq Whisper Prompt Engineering Anomaly Detection

Frameworks & Libraries

Next.js 16 React 19 React Native Expo SwiftUI WidgetKit FastAPI Flask Express.js Tailwind Framer Motion WebSocket NumPy ReportLab

Cloud & DevOps

Microsoft Azure Azure Functions Vercel Netlify Supabase Docker CI/CD GitHub Actions EAS Update Linux Windows Server WSL2

Payments & Comms

Stripe (live) Twilio SMS Resend Meta Pixel + CAPI GA4 GTM Webhooks

Security

SIEM Vulnerability Assessment Ethical Hacking Penetration Testing OSINT Network Security Threat Detection NIST / FedRAMP Compliance

Databases & Storage

SQLite PostgreSQL MySQL ChromaDB Database Design SQL Tuning

Tools & Platforms

REST APIs mDNS / Zeroconf PWA JWT Auth QR Code Systems PDF Generation 3D Modeling cPanel Tailscale

EXPERIENCE

Aug 2025 — Mar 2026

Field Engineer II

NextgenID — McLean, VA

  • Led enterprise deployment of integrated hardware and software identity management systems across multiple client sites
  • Performed advanced diagnostics across hardware, networking, and software platforms to resolve critical production issues
  • Implemented secure system configurations aligned with federal government compliance requirements (NIST, FIPS)
Aug 2024 — Aug 2025

QA & Cybersecurity Engineer

NextgenID — McLean, VA

  • Built automation scripts in Python that reduced manual QA effort by 40%+ and accelerated release cycles
  • Deployed SIEM monitoring solutions and configured network security controls, improving threat detection coverage
  • Conducted vulnerability assessments and authored security documentation for government compliance audits
Nov 2021 — Present

Founder & Software Engineer

Hummus Development LLC

  • Operate a one-person product studio — paid client web platforms, in-house SaaS, AI tooling, and native iOS apps end-to-end
  • Delivered first contracted client engagement April 2026 (Wheaton Valet Cleaners) — 5-page Next.js 16 rebuild + intake pipeline + chatbot
  • Run live infrastructure across Vercel, Netlify, Supabase, Stripe, Twilio, Resend, and a self-hosted Tailscale-served AI gateway on personal hardware
  • 23 shipped projects, 75,000+ lines of production code across Python, TypeScript, Swift, JavaScript, Lua, and C#
Aug 2020 — Apr 2022

Lead Technical Specialist

New Horizon Hosting LLC

  • Managed Windows Server hosting environments supporting 50+ client applications with 99.9% uptime
  • Developed dynamic web applications using PHP and SQL serving active user bases

Certifications

AZ-204 Azure Developer Associate
GMU Ethical Hacking
PY Python Programming
C# C# Development
C1 Most Technical Application Award Capital One Coders • 2016

LET'S BUILD
SOMETHING

karimsangid@gmail.com