A senior software engineer for Boston health and SaaS teams
Secure web platforms, AI features and security audits for Boston health, biotech and SaaS teams, with the start of your day in my evening.
01
Why Boston teams bring me this work
Health and biotech software holds data that must not leak and runs workflows that must not fail halfway through a patient's visit. The case study closest to that is a telemedicine app with real-time video consultations. The security audits and AI work I'd do for a Boston team come from the same habits: model the threats first, log what matters, keep personal data out of places it doesn't need to be, and test the restore before you need it.
What teams across the United States bring me
- Enterprise buyers send security questionnaires, and the number of state privacy laws keeps growing.
- You want AI features that hold up in production, with evaluations and cost control, not a demo that works once.
02
The hours we share with Boston
Boston keeps Eastern time, like New York: your 09:00 is 19:30 in Mumbai in winter and 18:30 in summer. Reviews and decisions happen at the start of your day, in my evening; audit findings arrive as a written report with the severity, the evidence and the fix for each.
Each city's 09:00–18:00 working day on the clock in Mumbai (UTC+5:30), in January and in July, so daylight saving is accounted for.
| City | In January | In July |
|---|---|---|
| BostonUTC−5 / UTC−4 | 19:30–04:30 (next day) | 18:30–03:30 (next day) |
Clocks Daylight saving time runs from 2:00 a.m. local time on the second Sunday in March to 2:00 a.m. on the first Sunday in November (15 U.S.C. 260a). India keeps one clock all year, so only your side moves.
03
Rules a Boston team's software meets
Data-security regulations
Massachusetts law (M.G.L. c. 93H, § 2) directs the state's consumer affairs department to issue regulations safeguarding the personal information of Massachusetts residents. They apply to anyone who owns or licenses such information, and scale with the size of the business and the amount of data stored.
The privacy bill, still pending
The Massachusetts Senate passed the Massachusetts Data Privacy Act 40–0 on 25 September 2025, and the House passed an amended version 146–0 on 4 June 2026. As of 13 October 2026 the bill (S.2619) was with a House–Senate conference committee appointed in June 2026, and had not been enacted.
What the House version would add
The House version would ban the sale of precise geolocation data, prohibit targeted advertising to people under 18, require affirmative consent to sell sensitive data, and include a private right of action alongside Attorney General rulemaking.
Across the United States: State privacy laws · SOC 2 and security questionnaires
This is engineering guidance, not legal advice: confirm what applies to your business with your counsel.
Further reading
- Article: What a penetration test report contains · 10 October 2026
The sections of a web application pentest report, what each one is for, and a fictional sample finding written the way I write real ones.
- Article: Hardening an AI-built app: the 12-point checklist · 10 October 2026
The twelve checks I run first on an app built quickly with AI coding tools, in the order that finds the most serious problems soonest.
04
Contracts and invoicing
Invoices in US dollars, monthly or per milestone, paid through Wise or Payoneer. I can work under your master services agreement and statements of work, with intellectual property assigned to you, and provide a W-8BEN.
More on working with teams in the United States is on the United States page.
Tax and legal treatment depends on your company and country: confirm it with your accountant or counsel.
05
Where Boston teams usually start
Security audit and penetration test
An attacker's view of your application and infrastructure, and a fix list you can act on.
- Price
- Fixed price per scope
- Timeline
- Agreed per project after scoping
Web platforms and SaaS
Custom web applications, APIs and integrations, built to be inherited.
- Price
- Fixed-scope quote after a discovery call
- Timeline
- Scoped per project, agreed before work starts
AI features in your product
LLM features that work on your real data, measured before they ship.
- Price
- Fixed-price scoping sprint, then a fixed-scope quote
- Timeline
- A scoping sprint first, then a timeline agreed per project
Architecture review and due diligence
An independent, written view of a system: what's solid, what's risky, and what it will cost to fix.
- Price
- Fixed price per scope
- Timeline
- Agreed per project after scoping
06
Case studies
- Case study: Immunomate · Telemedicine platform
- registered users
- 500+
- Case study: Digital Wardrobe · AI pipeline
- average time per image, upload to result
- 3–8 s
- Case study: Vayudoot Aviations · Education platform
07
Questions from Boston teams
What hours do we share with Boston?
The same as New York: your 09:00 is 19:30 in Mumbai from early November to mid-March and 18:30 the rest of the year. Reviews go at the start of your day, in my evening; findings and fixes arrive in writing.
Has Massachusetts passed its privacy bill?
Not as of 13 October 2026. Both chambers passed versions of the Massachusetts Data Privacy Act (S.2619), and a conference committee has had it since June 2026. The House version would ban selling precise geolocation data and targeted advertising to people under 18, so it's cheaper to design for those now than to retrofit them. What applies today are the data-security regulations issued under M.G.L. c. 93H, § 2. Confirm with your counsel.
Do you have an office in Boston?
No. I work remotely from Mumbai, with no office or staff in Boston, and I don't offer in-person meetings there. Security testing runs against environments you grant me, under written rules of engagement.
08