From Frontend to Firewalls

A software engineer’s journey into security engineering

Hey, I’m Faria.

AI Generated Image

If you’d told me five years ago that I’d be here, writing not just about how to build software, but how to break it (ethically, of course) to make it stronger, I might have laughed. My world used to be clean, logical, and predictable — if x, then y. As a software engineer, I built things. I turned designs into interactive features, solved logic puzzles with code, and measured my days in merged pull requests and shipped products. From travel booking engines in Pakistan to a COVID patient portal in the UK, I loved the concrete process of creation

But a quiet question started to follow me home from work: “Did I just build a door without thinking about the lock?”

My shift towards security wasn’t a lightning-bolt moment. It was a slow, persistent curiosity that became impossible to ignore. I’d ship a feature and then lie awake wondering, “What if someone tries to open it another way?”

That “what if” became too loud to ignore. It’s what pushed me to apply for a scholarship and move to Scotland for an NCSC-certified Master’s in Cyber Security. The degree gave me the framework, but the real turning point was a project back in the real world.

The theory was one thing; the practice was another. My “aha” moment came in a role at a UK pension firm. Instead of just being handed a security tool to run, they gave me a problem: “We need to see if our staff accounts are being compromised.” So, I built the solution myself — a real-time monitoring system from the ground up using cloud tools and some gritty Node.js scripting. The day we saw it prevent a potential breach was the day my side-interest became my mission. I wasn’t just a builder anymore; I was a guardian.

Now, I’m in the middle of my transition. I’m an Information Security Engineer in training, embracing the uncomfortable and rewarding role of a permanent student. I spend my days looking at systems through a dual lens: the builder who sees how it’s made, and the guardian who looks for where it could break.

This blog is my open notebook. Here, I’m sharing the messy, rewarding journey of bridging two worlds: the creative logic of a software engineer and the vigilant mindset of a security professional. We’ll talk about secure code, career changes, and how to protect the things we build.

If any of this resonates with you, I’d love to connect. You can find me on LinkedIn or right here in the comments.

Thanks for reading, Faria