About Nathaniel
- Javascript Development
- HTML / CSS Development
- React.js Development
- Tailwind CSS
- Wordpress Development
- Node.js Development
- MongoDB Development
- PHP/MySQL Development
- Next.js Development
- Web Application Development
- Hybrid Mobile Application Development
- Development with Node.js
- Custom Business Software Development
- Redesign / Migration
- Python
- PHP
- MySQL
- LangChain
- React.js
- Tailwind CSS
- MongoDB
- Next.js
- AWS
- Azure
French
Native or bilingual
English
Fluent
Hebrew
Fluent
Experience
- Anima Cecodev
On Malt
Security Audit & Securing of Web Application (Node.js / React)May 2026 - June 2026ContextComplete security review of a training management SaaS application (multi-organization — Node.js / Express / TypeScript, React, PostgreSQL, JWT), before opening the platform to external users (online registration, payments).Main Contribution & Results- White-box audit of the entire back-end and front-end: 563 API routes reviewed, each with an explicit verdict.- 44 access control vulnerabilities (cross-organization IDOR) identified and fixed — including critical cases (access to another organization's data, payment diversion, exposed surface without authentication). 100% closed and protected against regression.- Reduced scope of access to file storage (NAS) to the principle of least privilege.- Implementation of a sustainable safety net: ~80 automated tests (integration + end-to-end) replayed with each delivery via a GitHub Actions CI.Concrete Actions / Responsibilities- OWASP Top 10 Review: access control, injection (SQL/XSS), secrets management, HTTP headers, vulnerable dependencies, authentication/sessions.- Infrastructure & Deployment Audit: firewall, SSH, TLS/HSTS, PostgreSQL configuration, secrets storage.- Drafting of a deliverables file: detailed vulnerability report, risk prioritization by criticality, immediate fixes ('quick wins'), structural work before public opening, best practice recommendations. - Osnat Levy
On Malt
Intervention on Wordpress to fix custom pluginDIGITAL AND ITJanuary 2026 - January 2026Wordpress Intervention
- Fixed front-end bug during retrieval of custom information from the WordPress API.
- Secured access by creating a .env file containing access keys.
- Hello Masters
On Malt
Adding Wordpress featureAugust 2025 - August 2025Strasbourg, FranceAdded a feature to hello-masters.com to make user profile pages publicly accessible:- Added a privacy setting- Modified the display of the profile page in 'public mode'
Reviews
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Bachelor's DegreeUniversity Paris 82019Programmation informatique