Pramurta Sinha
Backend Engineer at Sofamon
Chandigarh, India
Summary
🤩
Rockstar🎓
Top SchoolPramurta Sinha is a backend engineer with around six years of professional experience building scalable Node.js/NestJS systems and consumer-facing apps using Next.js. He currently ships backend services at Kaiju and previously freelanced on 20+ projects, honing pragmatic delivery and client-facing engineering. As a 2023 Google Summer of Code contributor at Intel he built a GitHub Action for the widely used cve-bin-tool and created an NVD mirror to work around API rate limits, demonstrating practical security automation at scale. His work spans production-grade APIs, vulnerability scanning integrations, and developer tooling, with a knack for refactoring and improving observability in open-source projects. Based in Chandigarh and pursuing a B.Tech in Computer Software Engineering, he combines formal study with hands-on open-source and commercial experience. Colleagues describe him as curious and security-minded, often improving tooling to make secure practices easier for other developers.
6 years of coding experience
2 years of employment as a software developer
Bachelor of Technology - BTech, Computer Software Engineering, Bachelor of Technology - BTech, Computer Software Engineering at Chandigarh Group Of Colleges
English, Bengali, Hindi
Github Skills (8)
security10
cve10
python10
security-txt10
security-scan10
vulnerability10
sbom9
security-automation8
Programming languages (7)
Github contributions (5)
intel/cve-bin-tool
Apr 2022 - Jan 2023
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Role in this project:
Security Engineer
Security EngineerContributions:15 reviews, 60 commits, 92 PRs in 9 months
Contributions summary:Pramurta primarily contributed to fixing vulnerabilities and improving the security posture of the `intel/cve-bin-tool` repository. Their work included addressing broken quiet modes, improving filtering mechanisms related to spreadsheet macros, adding debug statements for checker loading, and adding new checkers for vulnerable components. They also addressed mismatches in CVE counts and improved the handling of missing input files, while also refactoring and adding helper scripts.
scanpythonsystem-toolslibxml2bugbounty
b31ngd3v/cve-bin-tool-action
Jun 2023 - Nov 2023
Contributions:7 PRs, 189 pushes, 54 branches in 4 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.