About
I’m a founding engineer and product builder who likes turning unclear ideas into products people can actually use—working across product, infrastructure, analytics, growth, design, and distribution.
At Product Hunt, I worked across the visible product and the systems behind a global maker community.
At Hero, I now help make secondhand selling simpler—from the first scan to the final listing. I also build independent apps and study how products break, which keeps me thinking about the whole experience, not just the code.
Recognition
Work
Founding Engineer
I help turn Hero’s idea for easier secondhand selling into a product people can rely on—from scanning and pricing an item to listing it across marketplaces. As a founding engineer, I work across the experience, the systems behind it, and the experiments that help it grow.
Full-stack → Senior → Team lead
Over six years, I worked across discovery, promoted products and ads, search, spam prevention, newsletter experiments, the Golden Kitty Awards, and community tools. I grew from full-stack engineer to associate team lead while learning how engineering, product, and community shape one another.
Side projects
A native Mac focus timer designed to stay out of your way
SontriA Safari companion that warns people before suspicious sites
BlixyAn iPhone keyboard for writing with custom fonts and themes
TagsdockA hashtag keyboard that made social posting faster on iPhone
SnapViewA simple way to reframe videos for vertical sharing
BuzzminerA quieter way to follow stories from different news sources
GiflessA playful tool for turning words and emoji into animated images
CowBullA quick word-guessing game built for the browser
Security
Security research taught me to question assumptions, test the edges, and build with more care. I’ve responsibly reported issues to Apple, Google, Meta, Amazon, United Airlines, eBay, Flickr, HackerRank, and MediaFire.
Cross-site scripting in Google Translate
Reported responsiblySafari Safe Browsing issue
Reported responsiblyGroup files visible without permission
Reported responsiblyGroup chat accessible without permission
Reported responsiblyCross-site request forgery in search
Reported responsiblyClickjacking across public pages
Reported responsiblyAccount takeover issue
Reported responsiblyReflected cross-site scripting
Reported responsiblyGroup invitation accepted without consent
Reported responsiblyStored cross-site scripting in profiles
Reported responsiblySSL protection could be disabled without consent
Reported responsiblyPress
Contact
Project, question, or just a hello—my inbox is open.
hello@rahulm.me