Pavlo

PAVLO SVIZINSKYY
Backend / Full-Stack Engineer — Node.js / TypeScript · AI Agents
· Automation & Security
[open contact info](look above in the "contact info" section) · Telegram @an404on · [open contact info](look above in the "contact info" section)
GitHub: github.com/enot3615 · [open contact info](look above in the "contact info" section) · Ukraine
(remote, EU/US hours)

SUMMARY
Backend / full-stack engineer with 3+ years of freelance and contract
work in Node.js and TypeScript — REST and WebSocket APIs,
production Telegram bots, browser automation and third-party
integrations, owned end-to-end from client brief through deployment
and support. I build AI-agent systems (MCP servers that give LLM
agents real tools), and I'm a cybersecurity student and security
researcher — web vulnerabilities, phishing (evilginx) and malware —
who founded a dev studio that ships client web apps with a security
review before release.
CORE SKILLS
Backend & APIs: Node.js, Express, TypeScript, JavaScript, REST,
WebSockets, Socket.IO, Protobuf, JWT/RBAC auth, webhooks, caching,
rate limiting
Queues & Automation: BullMQ (job queues), Puppeteer, browser
automation, anti-bot / CAPTCHA bypass, Telegraf (Telegram bots),
Electron
AI & Agents: MCP (Model Context Protocol) servers, LLM integration,
AI-agent orchestration (Claude Code), prompt engineering
Data: PostgreSQL, MySQL, MongoDB, Redis, Sequelize, TypeORM,
query optimization
Frontend: Vue 3, Nuxt, React, Vite, PWA (Service Workers, Workbox),
Three.js
Web3 (hackathon / devnet): Solana (Anchor, Rust), TON, smart-
contract integration, x402 agent payments
Infra / DevOps: Linux (Ubuntu/Debian), Docker, Nginx, Cloudflare,
DNS, VPS, Google Cloud, Git, CI/CD
Security: Web vulnerabilities (OWASP Top 10 / API Security Top 10),
Burp Suite, OSINT / reconnaissance, phishing / social engineering
(evilginx), malware analysis, Android reversing (APK/smali)
EXPERIENCE
Backend / Full-Stack Engineer — Freelance & Contract 2022 –
present · Remote
Build and ship backend systems end-to-end for clients on Node.js +
TypeScript — APIs, real-time services, bots, browser automation and
integrations — owning each from brief to deployment and support.
• Designed and shipped REST and WebSocket APIs on
Node.js + TypeScript for production apps with thousands of users.
• Built production Telegram bots on Telegraf —
notifications, user onboarding and payment flows.
• Built browser-automation and scraping pipelines on
Puppeteer with anti-bot and CAPTCHA-bypass handling.
• Ran background processing and task pipelines on
BullMQ; used Protobuf for compact, typed messaging.
• Implemented JWT/RBAC auth and integrated payment
gateways and third-party REST APIs with reliable webhooks.
• Profiled and optimized performance — fixed memory
leaks and event-loop bottlenecks, added Redis caching.
• Built SPAs and offline-first PWAs (Vue 3/Nuxt, React/Vite)
with Socket.IO; containerized services with Docker.
• Ran Linux servers (Nginx, SSL/TLS, Cloudflare, DNS) on
VPS and Google Cloud.
Founder & Developer — Vapan · vapan.org 2024 – present ·
Remote
Founded and lead a small studio (developers, designers, security) that
designs and ships client web applications.
• Lead development and ship client web apps (Node.js,
Vue/Nuxt), with a security review before every release.
• Own client communication — scoping, delivery and
remediation across 20+ client projects.
CYBERSECURITY & SECURITY RESEARCH
Hands-on offensive and application security, plus cybersecurity content
for a Ukrainian audience.
• Web application vulnerabilities — finding and fixing
OWASP Top 10 / API Security Top 10 issues; security review before
every Vapan release.
• Phishing & social engineering — building and studying
real phishing / MITM scenarios with evilginx.
• OSINT & reconnaissance — open-source intelligence
gathering and target profiling (infrastructure, exposed assets,
accounts).
• Malware analysis and Android reversing (APK / smali);
tooling with Burp Suite.
• Run a cybersecurity channel and publish technical write-
ups (Instagram @vapan_it · vapan.org).
 • Co-organizer of CTF Junior League (national youth
cybersecurity competition) and active CTF player.
SELECTED PROJECTS
AiFinPay — x402 payment rails for autonomous AI agents on Solana
— started at a hackathon, continued to a published npm package.
Node/Express backend, USDC/USDT settlement (devnet), React/Vite
SPA, Docker/Nginx.
aifinpay.io · npm: npmjs.com/package/@aifinpay/agent · github.com/enot3615
Autonomous multi-agent system (MCP) — MCP (Model Context
Protocol) servers exposing real tools to LLM agents, orchestrating
Claude Code agents across multiple projects with Slack as the control
interface.
github.com/enot3615
EDUCATION & CERTIFICATIONS
• B.Sc. Cybersecurity — West Ukrainian National
University, Ternopil · 2024–2028 (in progress)
• Cisco Networking Academy — Junior Cybersecurity
Analyst Career Path
• Cisco — CyberOps Associate
LANGUAGES
Ukrainian — Native · English — B1 (Intermediate), actively improving
(read/write technical docs fluently; improving spoken)