About
Security engineer who builds real tools, not just findings — backed by tests, CI, and strict typing.
Security & AppSec Engineer | Supply-Chain Security & Threat Detection
Advanced Systems & Software Engineering student (UPB, 7th semester), early-career — I ship real tools.
I'm a 7th-semester Systems & Software Engineering student at UPB (Bucaramanga) who operates at an engineering level rather than a findings level. I build production-grade security tools with tests, CI pipelines, and strict typing — not just reports. My flagship project, SlopGuard, addresses slopsquatting: the emerging attack surface where LLMs suggest non-existent package names and attackers pre-register them with malicious code. The tool runs a 5-layer detection engine with zero runtime dependencies, covering PyPI and npm, with CLI, pre-commit, GitHub Action and self-hostable SaaS frontends. I also have hands-on experience with mobile app hardening, TOTP 2FA, secure storage, and real-time network monitoring. Verified C2 English (EF SET 80/100). Available for remote collaboration.
- johan.rc2020@gmail.com
- GitHub
- CV
- C2 — EF SET 80/100
Skills
Security & AppSec
- Software supply-chain security (slopsquatting detection)
- Dependency scanning & pre-install guarding
- Endpoint threat detection (port scans, intrusions)
- TOTP 2FA & backup codes
- Secure SDLC & CI security gates
- Mobile app hardening (biometric lock with lifecycle re-lock)
- Argon2id PIN hashing (memory-hard)
- OS-backed secure storage
- Encryption at rest (SQLCipher)
- Row-Level Security (RLS)
- Deterministic decimal money engine
Languages
- Python
- JavaScript
- TypeScript
- SQL
- Dart
Backend & Data
- Hybrid SQL / NoSQL / in-memory data architecture
- REST APIs
- WebSockets
- Firebase
- AI-based analytics
- High-availability system design
Tooling & DevSecOps
- Git / GitHub
- GitHub Actions / CI
- pre-commit
- pytest
- mypy strict
- Package publishing
- Vercel
Frontend
- Responsive web (HTML / CSS / JS)
- Flutter UI
- React / Next.js & Tailwind
Soft Skills
- Bilingual EN (C2) / ES (native)
- Agile / Scrum (Scrum Master)
- Technical documentation
- Remote / async collaboration
Experience
Developer / Technical Support
Pontificia Universidad Bolivariana (UPB) · Jan 2026 – Present · Bucaramanga, Colombia
- Endpoint threat detection: identification and analysis of port scans and network intrusion attempts.
- Automated asset classification system (routers, printers, cameras) with real-time monitoring dashboard and KPIs.
- Technical support to end users across the institution.
Scrum Master
Pontificia Universidad Bolivariana (UPB) · Jun 2025 – Nov 2025 · Bucaramanga, Colombia
- Contributed to the design of a high-availability infrastructure targeting ~100k concurrent users with a <500ms latency objective (design target, not a measured outcome).
- Collaborated on hybrid SQL / NoSQL / in-memory architecture decisions and AI-based analytics integration.
- Led full Scrum cycle: sprint planning, daily stand-ups, retrospectives and stakeholder demos.
Education
B.S. in Systems & Software Engineering
Pontificia Universidad Bolivariana · Feb 2023 – Present (7th sem.)
Advanced coursework in software architecture and systems design.
Certifications
EF SET English Certificate — CEFR C2 (Proficient), 80/100
EF SET · 2026
Responsive Web Design
freeCodeCamp · 2024
JavaScript Algorithms and Data Structures
freeCodeCamp · 2025