Rho Alphonce Jornadal

Fourth-year Computer Science student building backend systems with Java and Spring Boot, looking for a junior Java / Spring Boot developer role. I care about fast, secure APIs and solid unit testing, and I measure the results.

GET /url-shortener/{code}
302 Found
requests   410,451
throughput 8,207 req/s
p95        3.49 ms
errors     0%
load       200 virtual users, k6

Projects

URL Shortener API on GitHub

Spring Boot, PostgreSQL, Redis, k6 · Oct 2026

A RESTful service for creating short links and redirecting them. Redirects use the Cache-Aside pattern with Redis, which takes read load off the database and keeps latency low.

8,207 req/s3.49 ms p95, 0% errors in local k6 testing at 200 users

19wpm on GitHub

TypeScript, Spring Boot, PostgreSQL, Redis, WebSockets, Docker, Azure · May 2026

A Monkeytype-inspired typing platform with JWT auth (including token blocklisting) and GitHub and Google OAuth2 login. Multiplayer race mode runs on WebSockets/STOMP with Redis-backed ephemeral state, containerized and deployed on Azure Container Apps.

Live demo of 19wpm

2.5 ms / 5.3 msp95 on reads / writes, 0% errors across ~27,600 requests (median of 3 local k6 runs)

PharmaTrack on GitHub

TypeScript, Spring Boot, MySQL · May 2025

A pharmacy management system covering medicine inventory, sales transactions and customer records, with 20+ REST endpoints.

183 testsJUnit 5, Mockito, MockMvc and H2, covering JWT handling and the auth, product, role and stock APIs

More projects

  • Relay on GitHub Java, Spring Boot, WebSockets, React, TypeScript

    Real-time chat application with a Spring Boot WebSocket/STOMP backend, JWT-authenticated handshakes, presence tracking, and a React/TypeScript frontend.

  • LSRS on GitHub Laravel, PHP, MySQL, Tailwind

    Gown and suit rental management system with a reservation lifecycle, deposit and invoice workflows, and PHPUnit feature tests.

  • MalVote on GitHub Python, FastAPI, React, ML

    Android APK malware classifier using a soft-voting ensemble, 96.05% accuracy across 5 threat classes, with a FastAPI backend and React dashboard.

Experience

Cybersecurity Intern / Penetration Tester, Infinity Hub

Davao City · Jul – Aug 2026

  • Found an IDOR vulnerability (CWE-639), an XSS flaw, and a sensitive data exposure (CWE-200) that leaked bcrypt hashes in API responses, while testing a production HRMS.
  • Ran automated and manual tests with OWASP ZAP and Burp Suite (SQL injection, LFI/RFI, SSTI) and documented each finding with a recommended fix.

Skills

Languages
Java, PHP, Python, Go, C++, C#, TypeScript
Backend
Spring Boot, Spring Security (JWT, OAuth2), REST APIs, WebSockets/STOMP, Laravel, FastAPI
Data
PostgreSQL, MySQL, Redis, Flyway, H2, caching
Testing
JUnit 5, Mockito, MockMvc, PHPUnit, k6, Postman
Security
OWASP ZAP, Burp Suite, authentication and authorization
DevOps
Docker, Azure Container Apps, Git, GitHub, Vim
Concepts
Distributed systems, system design, concurrency, algorithms

Education & certifications

BS Computer Science, University of Mindanao

Matina, Davao City · Aug 2023 – expected Aug 2027

  • IT Specialist: Cybersecurity May 2026
  • Cloud Computing Fundamentals, IBM Mar 2026
  • Cybersecurity Fundamentals, IBM Jul 2025
  • GitHub Foundations Jun 2025
  • IT Specialist: Databases May 2024