Junior Application Security Engineer & Security-Focused Backend Developer.
- secret-scanner (Cybersecurity / Tooling) — Lightweight CLI scanner in Python for detecting leaked credentials, private keys, and high-entropy secrets across filesystems and full Git commit history (with Shannon entropy heuristics, length-scaled masking, and pre-commit hook support).
- secure-api (Cybersecurity / Backend) — Hardened REST API in FastAPI demonstrating defensive backend engineering: Argon2id password hashing with timing attack mitigation, anti-IDOR scoped authorization, sliding-window rate limiting, HTTP security headers, structured logging with credential redaction, and an OWASP API Security Top 10 threat model (28 automated tests, CI passed).
- reconflow (Cybersecurity / CLI) — Reconnaissance CLI in Python for subdomain discovery, live host probing, and differential change tracking. Published on PyPI, MIT licensed, with 91 unit tests and automated CI releases.
- build-your-own-kafka (Systems / Java) — Kafka-like broker in Java (custom binary TCP protocol, segmented commit log with index, ZooKeeper controller election, leader-follower replication). Forked from a tutorial project; fixed its Maven layout and ran a 3-broker cluster end to end.
- AnyPS5 — C++ systems code: implemented
sceSysmoduleIsLoadedInternal[merged upstream], submitted FreeBSDtgammafprecision fix with unit tests [PR submitted]. - Linux kernel (staging) — submitted checkpatch cleanup and guard(mutex) refactoring patches to IIO/staging maintainers [under review].
- GitHub Advisory Database — submitted a summary improvement for a QNAP HybridDesk Station command injection advisory [PR under review].
- Languages: Python, Java, C++, Bash
- Backend & Security: FastAPI, SQLAlchemy, JWT, Cryptography (Argon2id), OWASP API Top 10, AppSec, Threat Modeling
- Systems & Tools: Linux, Git, Docker, Apache ZooKeeper, Maven, TCP/IP sockets
- GitHub: @ErenYeager1836