Available for a professional internship, January to April 2027
I work on the corporate platform of a logistics company in Panama, and I defined its security model. The same image is deployed as two services with different permissions. Identity is by invitation and sessions are revoked from the server. Each module of the platform has its own attack suite.
Public site, internal portal, client due diligence and accounts receivable. The same image is deployed as two services with different permissions.
Companies licensing the ERP query their own data by typing the question. An AST rewriter injects three permission filters before the SQL runs.
Eight online applications feed a signed-in portal where clients follow their submissions and the team works them, with permission resolved against the ERP.
Clients, contacts, quotes, appointments and shipment deals in a single record. Permission by role and branch is enforced on the server and in the database.
Every tool is tagged with the area I use it in.
33 of 33 tools