Full stack Java developer. About three and a half years building trading and portfolio management platforms for buy-side firms, with Java and Spring Boot on the back end, Angular on the front, and AWS underneath.
I came to development through security (M.S. in Computer Science with a cyber security focus from NJIT), so it shows up in how I write code: Spring Security and JWT on the services, input validation on every write path, and a habit of asking how something could be abused before it ships.
📍 Princeton, NJ · 🌐 akhil-1527.github.io
- Backend: Java 17, Spring Boot 3, REST and microservices, Spring Security, Hibernate/JPA, Oracle and PostgreSQL
- Frontend: Angular, TypeScript, RxJS, NgRx, ag-Grid
- Cloud and delivery: AWS (EC2, S3, RDS, IAM, CloudWatch), Docker, Jenkins, GitHub Actions
- Domain: Charles River (CRD) orders and positions, allocations, buy-side trading
- Testing: JUnit, Mockito, Jasmine, Karma
- OWASP Java Encoder (merged): made the JavaScript encoders encode backtick and
$, so their output is also safe inside template literals - OWASP Dependency-Track (merged): fixed OIDC team sync for identity providers that send groups as a bracketed list string, such as AWS Cognito
- Kestra: adding unit tests for the UI design system
Small tools I built to go deeper on AWS and application security. Most use only the standard library so they're easy to read and audit.
- aws-iam-privesc-finder: finds known IAM privilege escalation paths in an AWS account, mapped to MITRE ATT&CK
- cloudtrail-hunter: hunts CloudTrail logs for root usage, logins without MFA, IAM tampering and log evasion
- secretscan: secrets scanner using regex rules plus entropy, with redaction and CI-friendly exit codes
- s3-auditor and sg-auditor: flag public S3 buckets and internet-open security groups
- agentaudit: a multi-agent system that red-teams AI agents and MCP servers for security flaws
AWS Certified Solutions Architect, Associate · AWS Certified Developer, Associate