Engineering
Python, TypeScript, React, FastAPI, Node. Four projects that run on a machine rather than four that demo well.
B.S. Computer Science, May 2027
Leo
Malinen
Software engineering, security, and data. I build the part that decides what matters.
PythonTypeScriptJavaScriptC++CJavaRPowerShellHTML / CSSSQL
PythonTypeScriptJavaScriptC++CJavaRPowerShellHTML / CSSSQL
ReactNext.jsNode.jsFastAPIPyTorchPandasOpenCVTailwindDockerKubernetesNmapScapyOllamaGit
ReactNext.jsNode.jsFastAPIPyTorchPandasOpenCVTailwindDockerKubernetesNmapScapyOllamaGit
Three things, one habit
Security
STIX and TAXII feeds, packet capture, port scanning, payload inspection. Tooling I wrote because I wanted to see what was actually on the wire.
Data
Annotation pipelines, rubric grading, cross-validation against automated scripts. The unglamorous half of machine learning, done properly.
Most of it is nothing.
The job is knowing which part isn't.
Project · self hosted
Security Sentinel
Next.js · TypeScript · Tailwind CSS · Ollama
It ingests STIX 2.1 indicators from TAXII 2.1 feeds, normalises them into one searchable store, and surfaces what is trending across sources rather than within any single one.
A local Ollama model runs on a daily schedule and summarises the highest signal activity into a morning intel brief. Every byte of data and every token of inference stays on the machine it belongs to.
Measured, across the four projects
- CPU reduction, gesture pipeline
- 0%
- Threat report convergence, local subnets
- under 0 min
- Geolocation resolve, global queries
- under 0 sec
Built to run unattended.
Four that run
Built, not
mocked up.
Each one started because something was harder to see than it should have been.
Gesture Control
Python · OpenCV · Node
A hand tracking module for desktop navigation. Heavy frame processing sits behind a motion detection threshold, which cut CPU usage by 40%, and a state machine keeps gesture context across a session.
Security Toolkit
Python · Nmap · Scapy
Vulnerability scanning, packet sniffing and network monitoring in one modular tool. Threat reports converge in under five minutes across local subnets, with no single point of failure.
DNS IP Checker
Python · Requests · Geolocation API
Synchronous querying with error handling, validation and JSON formatting. Location data resolves in under a second across global queries, with no API timeout failures.
Security Sentinel
Next.js · TypeScript · Tailwind
The threat intelligence dashboard above. STIX 2.1 over TAXII 2.1, normalised and searchable, with a local model writing the daily brief and nothing leaving the host.
Also
Two hackathon wins in 2026: Best Idea at RLC Hacks for Resera, and Cyber Pulse. Five hackathons entered. NCL Cyber League CTF, 70th percentile.
The record
- Workada
- Machine Learning Data Specialist
- Aug 2026 to now
- iD Tech
- Instructor
- Jun 2026 to Aug 2026