Cloud Secuirty · SWE · MSc Cybersecurity Poland

TakundaP J Nhau

Software engineer evolving into security engineering. I build full-stack systems in Python, Java, and SQL — then harden them with RBAC, JWT, TLS, and multi-tenant isolation.

> Building the defenses.

View my journeyLinkedIn

4+

Years building

5

Engineering roles

2

Internships

MSc

Cybersecurity

01 — About

Engineer by craft.
Defender by instinct.

I'm a software engineer moving into cloud security engineering — because the part of building systems I always cared about most was whether they could be broken. Through my bachelor's and two internships I built full-stack systems in Python, Java and SQL: REST APIs, document management platforms, payroll and finance modules. Along the way I kept gravitating to the security side of the work.

Now I'm doing my MSc in Cybersecurity at UMCS Lublin, and my thesis is not a paper — it's a product. I'm building a mobile app that uses a fine-tuned Polish-language transformer model to detect scam SMS, phishing emails, fraudulent URLs and suspicious calls, with a real-time family-alert system designed to protect seniors. Poland loses hundreds of millions of złoty to these scams every year — CERT Polska registered over 260,000 fraud incidents in 2025 alone.

Core Skills

Application Security88%
AI85%
Full-Stack Development92%
API Security90%
Cloud & CI/CD82%

Languages

English

Native / Bilingual

Polish

Limited Working

Certifications

  • (ISC)² Candidate
  • Complete Linux Training
  • 100 Days of Code: The Complete Python Pro Bootcamp
02 — Career Journey

From code to hardened systems

A trajectory shaped by building real products — and always asking what happens when someone tries to break them.

Software Engineer — Adversarial AI & Rust

Only Dust

Poland · 7 months

Aug 2025 — Feb 2026
  • Design and build coding challenges that test the limits of Large Language Models (LLMs)
  • Create adversarial problems in Rust focused on logic traps, hidden bugs and complex edge cases
  • Analyse AI reasoning failures to understand model weaknesses and improve challenge design
  • Collaborate with open-source contributors to review, test and refine AI-resistant tasks
  • Support the Project Valhalla initiative pushing AI beyond its comfort zone
RustAdversarial AILLMOpen Source

Full Stack Engineer Intern

Ayist Group

Warsaw · 6 months

Jul 2025 — Dec 2025
  • Implemented RBAC for a centralized document management system handling sensitive Finance and Payroll documents
  • Designed multi-tenant data isolation (company_id segregation) across a modular ERP platform
  • Applied API security controls including rate limiting, access-scoped sharing and secure SMTP flows
  • Built invoice-generation and PDF payslip features with PII/financial data compliance
  • Delivered in Agile with code reviews focused on secure coding practices
RBACMulti-tenantAPI SecurityPythonAgile

Junior Software Engineer

xorio

1 year 1 month

Jul 2024 — Jul 2025
  • Built a FUSE-based encrypted file system in Rust for secure, transparent data storage
  • Implemented cryptographic primitives using audited libraries (AES-GCM, PBKDF2)
  • Developed a CLI tool and library to support encrypted sync and untrusted cloud backups
RustCryptographyAES-GCMPBKDF2FUSE

Java Developer Intern

Intern Intelligence

Remote · 2 months

Jan 2025 — Feb 2025
  • Implemented JWT-based authentication restricting REST API access to authorized users
  • Configured SSL/TLS for encryption of data in transit
  • Built CRUD REST APIs with comprehensive unit and integration test coverage
  • Optimized SQL queries with indexing, pagination and caching for availability under load
  • Authored GitHub Actions CI/CD workflow automating test and deployment gates
JWTTLSJavaCI/CDSQL

Full Stack Web Developer

clip4consulting

South Africa · 2 years 4 months

May 2022 — Aug 2024
  • Developed and migrated web applications to Next.js using TypeScript and modern React architecture
  • Implemented and maintained frontend and backend functionality with the Next.js App Router
  • Integrated Supabase for database and backend services, including database migrations
  • Configured Vercel deployments with middleware safeguards for missing environment variables
Next.jsTypeScriptReactSupabaseVercel

Master's degree, IT Cybersecurity

Uniwersytet Marii Curie-Skłodowskiej w Lublinie

Oct 2025 — Sep 2027In Progress

Bachelor's degree, Computer Science

Wyższa Szkoła Przedsiębiorczości i Administracji w Lublinie

Feb 2022 — Jul 2025Completed
03 — Featured Work

Thesis as product.
Impact at scale.

MSc Thesis · In Development

AI-Powered Scam Detection Platform

An app using a fine-tuned Polish-language transformer to detect scam SMS, phishing emails, fraudulent URLs and suspicious calls — with a real-time family-alert system to protect seniors.

FlutterFastAPIPyTorchHuggingFaceONNXTFLitePostgreSQLFCM
The Problem

260,000+

fraud incidents registered by CERT Polska in 2025

Real-time family alerts — when grandma receives a scam, her family knows within seconds.

AI Twin

Meet my AI twin

AI assistant that knows my career inside out — it answers in first person about my experience, skills and MSc thesis, and can pass your details straight to me.

Start chatting
04 — Portfolio

Selected projects

Systems I've built and hardened — with links to the code and live demos where available.

Completed

AI Assistant's

all my fun ai assistances

FlutterMLFastAPI
View project
In Development

ScamShield

MSc thesis — AI-powered mobile platform for real-time fraud detection and family alerts.

FlutterMLFastAPI

Link available soon

Production

ERP Security Module

Multi-tenant document management with RBAC, rate limiting, and secure SMTP flows.

PythonRBACDevSecOps

Link available soon

Completed

Secure REST API

JWT-authenticated Java API with TLS, CI/CD gates, and performance-hardened endpoints.

JavaJWTCI/CD

Link available soon

Writing

From the blog

All posts
14 Sept 20261 min read

RBAC is harder than it looks

Role-based access control sounds simple until you have multi-tenant data, sensitive documents, and five modules that all have to agree.

AppSecRBACMulti-tenant
Read post
14 Sept 20261 min read

Detecting scam SMS with a fine-tuned Polish transformer

Why a generic model was not enough for Polish-language fraud, and how the alert flow protects the people most often targeted.

Machine LearningNLPFraud
Read post
05 — Contact

Let's build
something secure.

Open to security engineering roles, collaborations, and conversations about building defenses that matter.

Email

tpjn02@gmail.com

LinkedIn

/in/takundapjnhau

Location

Poland

TP

> initializing…_