Pavlo

PAVLO SVIZINSKYY
Backend / Full-Stack Engineer — Node.js / TypeScript · AI Agents (MCP) · Automation & Security
[open contact info](look above in the "contact info" section) · Telegram @an404on · [open contact info](look above in the "contact info" section)
GitHub: github.com/enot3615 · [open contact info](look above in the "contact info" section) · Ukraine (remote, EU/US hours)

SUMMARY
Backend / full-stack engineer with 3+ years of freelance and contract work in Node.js and TypeScript — REST and
WebSocket APIs, production Telegram bots, browser automation and third-party integrations, owned end-to-end from client
brief through deployment and support. I build AI-agent systems (MCP servers that give LLM agents real tools), and I'm a
cybersecurity student and security researcher — web vulnerabilities, phishing (evilginx) and malware — who founded a dev
studio that ships client web apps with a security review before release.
CORE SKILLS
Backend & APIs: Node.js, Express, TypeScript, JavaScript, REST, WebSockets, Socket.IO, Protobuf, JWT/RBAC auth,
webhooks, caching, rate limiting
Queues & Automation: BullMQ (job queues), Puppeteer, browser automation, anti-bot / CAPTCHA bypass, Telegraf
(Telegram bots), Electron
AI & Agents: MCP (Model Context Protocol) servers, LLM integration, AI-agent orchestration (Claude Code), prompt
engineering
Data: PostgreSQL, MySQL, MongoDB, Redis, Sequelize, TypeORM, query optimization
Frontend: Vue 3, Nuxt, React, Vite, PWA (Service Workers, Workbox), Three.js
Web3 (hackathon / devnet): Solana (Anchor, Rust), TON, smart-contract integration, x402 agent payments
Infra / DevOps: Linux (Ubuntu/Debian), Docker, Nginx, Cloudflare, DNS, VPS, Google Cloud, Git, CI/CD
Security: Web vulnerabilities (OWASP Top 10 / API Security Top 10), Burp Suite, phishing / social engineering (evilginx),
malware analysis, Android reversing (APK/smali)
EXPERIENCE
Backend / Full-Stack Engineer — Freelance & Contract 2022 – present · Remote
Build and ship backend systems end-to-end for clients on Node.js + TypeScript — APIs, real-time services, bots, browser
automation and integrations — owning each from brief to deployment and support.
• Designed and shipped REST and WebSocket APIs on Node.js + TypeScript for production apps with thousands of users.
• Built production Telegram bots on Telegraf — notifications, user onboarding and payment flows.
• Built browser-automation and scraping pipelines on Puppeteer with anti-bot and CAPTCHA-bypass handling.
• Ran background processing and task pipelines on BullMQ; used Protobuf for compact, typed messaging.
• Implemented JWT/RBAC auth and integrated payment gateways and third-party REST APIs with reliable webhooks.
• Profiled and optimized performance — fixed memory leaks and event-loop bottlenecks, added Redis caching.
• Built SPAs and offline-first PWAs (Vue 3/Nuxt, React/Vite) with Socket.IO; containerized services with Docker.
• Ran Linux servers (Nginx, SSL/TLS, Cloudflare, DNS) on VPS and Google Cloud.
Founder & Developer — Vapan · vapan.org 2024 – present · Remote
Founded and lead a small studio (developers, designers, security) that designs and ships client web applications.
• Lead development and ship client web apps (Node.js, Vue/Nuxt), with a security review before every release.
• Own client communication — scoping, delivery and remediation across 20+ client projects.
CYBERSECURITY & SECURITY RESEARCH
Hands-on offensive and application security, plus cybersecurity content for a Ukrainian audience.
• Web application vulnerabilities — finding and fixing OWASP Top 10 / API Security Top 10 issues; security review before
every Vapan release.
• Phishing & social engineering — building and studying real phishing / MITM scenarios with evilginx.
• Malware analysis and Android reversing (APK / smali); tooling with Burp Suite.
• Run a cybersecurity channel and publish technical write-ups (Instagram @vapan_it · vapan.org).
• Co-organizer of CTF Junior League (national youth cybersecurity competition) and active CTF player.

SELECTED PROJECTS
AiFinPay — x402 payment rails for autonomous AI agents on Solana — started at a hackathon, continued to a published
npm package. Node/Express backend, USDC/USDT settlement (devnet), React/Vite SPA, Docker/Nginx.
aifinpay.io · npm: npmjs.com/package/@aifinpay/agent · github.com/enot3615
Autonomous multi-agent system (MCP) — MCP (Model Context Protocol) servers exposing real tools to LLM agents,
orchestrating Claude Code agents across multiple projects with Slack as the control interface.
github.com/enot3615
EDUCATION & CERTIFICATIONS
• B.Sc. Cybersecurity — West Ukrainian National University, Ternopil · 2024–2028 (in progress)
• Cisco Networking Academy — Junior Cybersecurity Analyst Career Path
• Cisco — CyberOps Associate
LANGUAGES
Ukrainian — Native · English — B1 (Intermediate), actively improving (read/write technical docs fluently; improving spoken)