My primary focus is Python and Java backend development, with a strong interest in application security, IAM, web security, data security, and LLM infrastructure.

I also build frontend experiences using Astro, TypeScript, and Tailwind CSS, with particular interest in frontend architecture, design systems, responsive interfaces, and interactive web experiences.

My projects tend to explore practical engineering problems around system architecture, security boundaries, resilience, automation, and maintainability.

A Python security toolkit for web application assessment that combines reconnaissance, technology fingerprinting, security analysis, vulnerability intelligence, web scraping, and controlled security testing.

Key capabilities include:

• Technology fingerprinting
• SSL/TLS analysis
• Security headers assessment
• CVE correlation
• Static and dynamic web scraping
• XSS testing
• SQL injection analysis
• Directory enumeration
• Path traversal testing
• Subdomain enumeration
• Command injection testing
• REST API
• CLI automation
• JSON, CSV, JSONL, and HTML exports

CiberWebScan is an active project and represents my main work around web security automation and attack-surface analysis.

An asynchronous HTTP API designed to abstract multiple LLM providers behind a single interface.

The project currently explores integrations with:

• Groq
• OpenRouter
• OpenAI
• Gemini
• Ollama

Its architecture focuses on infrastructure concerns such as:

• Automatic provider fallback
• Server-Sent Events streaming
• Rate limiting
• Temporary provider blocklisting
• Exponential backoff
• Prometheus metrics
• Structured logging
• Redis integration
• Docker deployment

ModelRouter is a proof of concept exploring provider-agnostic LLM infrastructure, resilience, and observability.

A completed proof of concept for deterministic detection of Personally Identifiable Information and contextual risk analysis in files and repositories.

The project explores data exposure from a security perspective using techniques such as:

• Pattern detection
• Prefix and length validation
• Luhn validation
• Entropy analysis
• Contextual validation
• Cross-PII correlation
• Explainable risk classification

Current detection covers:

• Colombian identification numbers
• Colombian mobile numbers
• Email addresses
• Credit card numbers

LexGuard is no longer under active development. It remains public as a reference implementation for CLI architecture, deterministic PII detection, and explainable risk analysis.

A shared Astro-based environment for building and presenting multiple independent web experiences from a single project.

Each demo can maintain its own:

• Components
• Visual identity
• Content
• Types
• Interaction logic
• Data and helpers

while the platform provides common infrastructure for routing, internationalization, layouts, metadata, and shared styling.

The collection includes experiences such as:

DemoFactory represents the frontend side of my work, combining visual design, interaction, responsive development, content architecture, and reusable frontend foundations.

FastAPI · CLI development · automation · web security tooling · data processing

Spring Boot · Spring Security · Maven · REST APIs · authentication · authorization

Astro · TypeScript · Tailwind CSS · HTML · CSS · Markdown/MDX

Docker · Docker Compose · Redis · Prometheus · GitHub Actions · Git

Web security · IAM · JWT · RBAC · CVE analysis · PII detection · security assessment · API security

LLM orchestration · provider abstraction · streaming · fallback strategies · rate limiting · observability

Backend Engineering
├── Python
├── Java
└── API Architecture

Application & Web Security
├── IAM
├── Authorization
└── Security Assessment

LLM Infrastructure
├── Provider Abstraction
├── Resilience
└── Observability

Frontend Architecture
├── Astro
├── Tailwind CSS
└── Design Systems

• Backend engineering with Python and Java
• Application and web security
• IAM and authorization systems
• LLM infrastructure and multi-provider systems
• Resilient API architecture
• Frontend architecture with Astro and Tailwind CSS
• Design systems and reusable UI foundations

For a complete view of my projects and frontend work:

Not every repository represents a production-ready product.

This profile intentionally distinguishes between active projects, proofs of concept, architectural studies, and frontend experiments.

The featured projects are selected to represent the areas I am most interested in professionally:

Additional experiments and completed projects remain available through the repositories and the complete portfolio.