Hadi Rickit

I'm a Melbourne-based full-stack software engineer and cybersecurity professional with five years of experience across startups and enterprise environments. I currently lead a development team at LaunchKey Labs and run Gallifrey Consulting, my independent consultancy focused on security-first web development.

On the engineering side, I specialise in building production-grade web applications using Next.js, TypeScript, React, and Node.js — with a strong emphasis on clean architecture, CI/CD pipelines, and scalable backend systems. I've shipped multi-tenant enterprise platforms with Auth0/SSO integration, geolocation systems, AI-powered tooling using the Anthropic API, and headless Shopify storefronts. I'm comfortable owning the full stack from database schema through to deployment on Vercel.

On the security side, I hold a background in ethical hacking and data privacy, and I'm currently completing a Master's in Cybersecurity. I conduct penetration testing, security architecture reviews, and threat modelling for clients across fintech, legal, and SaaS verticals. I've built and delivered penetration testing case studies, privacy compliance audits, and security documentation for enterprise clients.

Recent highlights include:

• Leading development of GoSafe, an enterprise security and policing roster management system with multi-tenant Auth0 SSO and a Java backend integration layer
• Building CAY (Crowd Around You), a real-time safety check-in platform with time-boxed escalation flows
• Developing an AI-powered site audit tool using the Anthropic API and live web search for SEO and competitor analysis
• Architecting a surf forecasting web app integrating BOM/AUSWAVE data with Claude-generated forecast reports

I take a security-first approach to every engagement — whether that's a greenfield application, a legacy system integration, or a standalone security audit. My consultancy, Gallifrey Consulting, is specifically positioned around this principle: building things right the first time, so you don't pay to fix them later.

I work well with founders, CTOs, and product teams who move fast but care about doing it properly. I'm direct, documentation-conscious, and have experience working across time zones with both Australian and international clients.