Skip to content
View cwillam's full-sized avatar

Block or report cwillam

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cwillam/README.md

Christoph Willam

Secure Software Developer & DevSecOps Engineer

Building resilient backends · Hardening infrastructure · Automating CI/CD security

Website LinkedIn XING Email


About Me

I am a software developer with a strong focus on Secure Coding & DevSecOps, finishing my degree as an IHK Certified IT Specialist in Application Development (FIAE) in February 2027.

My engineering approach is rooted in understanding systems from the inside out: writing clean, defensive backend code and establishing automated security guardrails directly inside CI/CD pipelines (Shift Left). Rather than treating security as an afterthought, I build applications that are secure by design.

Beyond application development, I actively manage and harden my own Linux server environments and develop privacy-first Progressive Web Apps.


Tech Stack & Tooling

Core Backend & Systems

Python FastAPI PostgreSQL Bash Git

DevOps, Cloud & Linux

Linux Docker GitHub Actions

Security & Automated Quality Gates

PortSwigger Semgrep Trivy Gitleaks Pytest

Web Foundations & Project Experience

JavaScript CSS3 HTML5 PWA


Featured Projects

IHK Exam Prep Suite & PWAs

A series of privacy-first Progressive Web Apps built for computer science students in Germany. Designed for 100% offline learning with zero tracking.

  • Architecture: Complete offline capability via Service Workers, responsive Vanilla CSS3, zero external runtime dependencies, and local state persistence.
  • Reach & Distribution: Over 2,900 flashcards actively used across Germany. Available on the web and currently rolling out on the Google Play Store.
  • Stack: HTML5 · Vanilla CSS3 · Vanilla JavaScript · Service Workers / PWA · LocalStorage
  • Live Apps: AP1 · AP2 FIAE · AP2 FISI
  • Source: ap1-tracker · ap2-tracker · ap2-fisi-tracker

Secure API Gateway (FastAPI)

A hardened RESTful API demonstrating secure backend architecture and automated testing practices.

  • Security Highlights: JWT lifecycle management, bcrypt password hashing, Pydantic schema validation, and granular rate-limiting.
  • Infrastructure: Containerized with rootless Docker and verified through automated test suites in Pytest.
  • Stack: Python · FastAPI · PostgreSQL · Docker · Pytest
  • Status: In active development.

LLM Security Proxy (Secure AI Gateway)

A production-ready defense gateway designed to inspect, sanitize, and audit traffic to Large Language Models.

  • Security Highlights: Prompt injection mitigation, automated PII redaction, token-based rate limiting, and immutable PostgreSQL audit logs.
  • Stack: Python · FastAPI · Redis · PostgreSQL · Docker · GitHub Actions
  • Status: Capstone Architecture (Roadmap 2027).

Education & Continuous Learning

  • IHK Certified IT Specialist for Application Development (FIAE)
    Professional Degree · Expected Completion: February 2027
  • Core Competencies: Secure Software Design, Linux Server Administration, Container Security & CI/CD Pipeline Automation.
  • Roadmap & Cloud Focus (2027): Microsoft Azure (AZ-900 / SC-900), Cloud Identity (Entra ID) & Infrastructure as Code (Terraform).

Open to software engineering, backend, and DevSecOps opportunities starting Q1/Q2 2027.

Pinned Loading

  1. ap1-tracker ap1-tracker Public

    Ein moderner, lokaler Fortschritts-Tracker für die Fachinformatiker Abschlussprüfung Teil 1. Keine Anmeldung. Kein Tracking. Deine Daten gehören dir.

    JavaScript 19 3

  2. ap2-tracker ap2-tracker Public

    Ein moderner, lokaler Fortschritts-Tracker für die Fachinformatiker Abschlussprüfung Teil 2 (FIAE). Keine Anmeldung. Kein Tracking. Deine Daten gehören dir.

    JavaScript 7 4

  3. ap2-fisi-tracker ap2-fisi-tracker Public

    Ein moderner, lokaler Fortschritts-Tracker für die Fachinformatiker Abschlussprüfung Teil 2 (FISI). Keine Anmeldung. Kein Tracking. Deine Daten gehören dir.

    JavaScript 5 2

  4. portfolio-website portfolio-website Public

    HTML 1