Projects
Spring Boot, PostgreSQL, Redis, k6 · Oct 2026
A RESTful service for creating short links and redirecting them. Redirects use the Cache-Aside pattern with Redis, which takes read load off the database and keeps latency low.
8,207 req/s3.49 ms p95, 0% errors in local k6 testing at 200 users
TypeScript, Spring Boot, PostgreSQL, Redis, WebSockets, Docker, Azure · May 2026
A Monkeytype-inspired typing platform with JWT auth (including token blocklisting) and GitHub and Google OAuth2 login. Multiplayer race mode runs on WebSockets/STOMP with Redis-backed ephemeral state, containerized and deployed on Azure Container Apps.
Live demo of 19wpm ↗
2.5 ms / 5.3 msp95 on reads / writes, 0% errors across ~27,600 requests (median of 3 local k6 runs)
TypeScript, Spring Boot, MySQL · May 2025
A pharmacy management system covering medicine inventory, sales transactions and customer records, with 20+ REST endpoints.
183 testsJUnit 5, Mockito, MockMvc and H2, covering JWT handling and the auth, product, role and stock APIs
More projects
-
Relay on GitHub Java, Spring Boot, WebSockets, React, TypeScript
Real-time chat application with a Spring Boot WebSocket/STOMP backend, JWT-authenticated handshakes, presence tracking, and a React/TypeScript frontend.
-
LSRS on GitHub Laravel, PHP, MySQL, Tailwind
Gown and suit rental management system with a reservation lifecycle, deposit and invoice workflows, and PHPUnit feature tests.
-
MalVote on GitHub Python, FastAPI, React, ML
Android APK malware classifier using a soft-voting ensemble, 96.05% accuracy across 5 threat classes, with a FastAPI backend and React dashboard.
Experience
Cybersecurity Intern / Penetration Tester, Infinity Hub
Davao City · Jul – Aug 2026
- Found an IDOR vulnerability (CWE-639), an XSS flaw, and a sensitive data exposure (CWE-200) that leaked bcrypt hashes in API responses, while testing a production HRMS.
- Ran automated and manual tests with OWASP ZAP and Burp Suite (SQL injection, LFI/RFI, SSTI) and documented each finding with a recommended fix.
Skills
- Languages
- Java, PHP, Python, Go, C++, C#, TypeScript
- Backend
- Spring Boot, Spring Security (JWT, OAuth2), REST APIs, WebSockets/STOMP, Laravel, FastAPI
- Data
- PostgreSQL, MySQL, Redis, Flyway, H2, caching
- Testing
- JUnit 5, Mockito, MockMvc, PHPUnit, k6, Postman
- Security
- OWASP ZAP, Burp Suite, authentication and authorization
- DevOps
- Docker, Azure Container Apps, Git, GitHub, Vim
- Concepts
- Distributed systems, system design, concurrency, algorithms
Education & certifications
BS Computer Science, University of Mindanao
Matina, Davao City · Aug 2023 – expected Aug 2027
- IT Specialist: Cybersecurity May 2026
- Cloud Computing Fundamentals, IBM Mar 2026
- Cybersecurity Fundamentals, IBM Jul 2025
- GitHub Foundations Jun 2025
- IT Specialist: Databases May 2024