Security-minded Software Engineer β’ Product Security / AppSec / DevSecOps β’ Switzerland π¨π
- π Software supply chain security & secure SDLC (CBOM / dependency & crypto usage transparency)
- π§° Practical security tooling: Linux, Docker, Nginx, OAuth2/JWT, pentest toolchain
- π°οΈ Interests: SOC/MDR workflows, virtualization security, OWASP web/API risks
- π§± Strong systems foundation: OS / compilers / networking β useful for building and securing real systems
- DynamicCBOM β runtime CBOM extraction via eBPF/bpftrace, generates CycloneDX 1.6 CBOMs + evaluation charts
β https://github.com/SEG-UNIBE/DynamicCBOM - rl-elevator β event-driven Gymnasium environment + FIFO/LOOK baselines + RL agents + evaluation/visualization pipeline
β https://github.com/william-dan/rl-elevator - LingoDB-CSE β undergraduate thesis prototype: multi-query optimization via common sub-join elimination + hash multi-map reuse
β https://github.com/william-dan/LingoDB-CSE - SysY2022-ARMv7-Compiler β optimizing compiler targeting ARMv7, with SSA-style middle end + practical backend & reg allocation
β https://github.com/william-dan/SysY2022-ARMv7-Compiler - thingy-api-Yellow β backend API for Smart Mobility/Bike Accident Detection (TypeScript, Koa, MQTT, MongoDB/InfluxDB, Jest, Docker)
β https://github.com/ASE2024-Yellow/thingy-api-Yellow - e-collecting-hackathon-team9 β βProsignumβ: verifiable, privacy-preserving e-collecting proposal/workspace (Hackathon 2025)
β https://github.com/swiss/e-collecting-hackathon-team9
- π When Gradient Optimization Is Not Enough: Dispersive and Anchoring Geometric Regularizer for Multimodal Learning β arXiv:2601.21670
https://arxiv.org/abs/2601.21670 - π ICPC SWERC 2025 β selected to represent University of Bern (team contest)
- π Huawei BiSheng Cup (National Compiler Design Competition) β optimizing compiler in C++ targeting ARM
Security / Platform: AppSec β’ DevSecOps β’ OAuth2/JWT β’ Linux β’ Docker β’ Nginx β’ (runtime tracing) eBPF/bpftrace
Systems: C/C++ β’ compilers/tooling β’ networking β’ performance mindset
Backend / Data: TypeScript/Node.js β’ REST β’ MQTT β’ MongoDB β’ InfluxDB β’ testing (Jest)
ML (selective): PyTorch β’ RL (Gymnasium / PPO)
Iβm currently looking for Product Security / Application Security / DevSecOps roles in Switzerland.
Languages: English (C1), German (B2), Chinese (native).

