Software Engineer focused on security, Rust tooling, and Linux
Portfolio · Email · UseSecure · Madrid, Colombia
I build developer tools and production systems where reliability and security matter. My work spans Rust and TypeScript, Linux applications, static analysis, authentication and authorization, data platforms, and cloud delivery.
I use coding agents within a disciplined engineering workflow: scoped tasks, automated checks, security review, and human validation.
- Built and published Secure Engine, a local-first Rust security analyzer. A controlled large-repository optimization reduced end-to-end analysis time from about 119 seconds to 14 seconds without changing its findings.
- Modernized a production travel platform while preserving indexed routes, content, metadata, and search visibility, then automated quotation and customer follow-up workflows that were previously manual.
- Reported a security issue to RustDesk through coordinated private disclosure; the maintainers acknowledged the report and merged the related fix.
- Delivered an invited technical talk at the Max Planck Institute for Security and Privacy on structural security risks in AI-assisted software systems.
| Project | Work and outcome | Evidence |
|---|---|---|
| UseSecure | Local-first Rust analysis, signed releases, performance engineering, and reproducible benchmark infrastructure | Engine v0.1.10-rc2 · Bench |
| Production platforms | Modernized customer-facing and operational systems across discovery, quotations, booking, publishing, authentication, PostgreSQL, and AWS-backed media | Mitiquete · Conociendo Colombia · TripEuropa |
| Open source | Small, reviewable fixes across Rust and Linux tooling, CLI behavior, desktop integration, CI, dependencies, and regression coverage | Contribution activity |
| CMS Nova | Reusable headless CMS foundation with schema-driven content, hybrid persistence, template tooling, and role-based administration | Repository |
- Languages: Rust, TypeScript, JavaScript, Python, SQL, shell
- Platforms: Linux, Next.js, React, Node.js, PostgreSQL, Prisma, Docker, GitHub Actions, Nix, AWS, Vercel, Hetzner
- Security: authentication, authorization, tenant isolation, secrets, storage, webhooks, static analysis, and coordinated disclosure
I lead software architecture and AI-assisted engineering at Mitiquete SAS while contributing to open-source tooling and developing public security tooling and evaluation infrastructure.
Spanish is my native language, and I work professionally in English.