YOSI

01

Professional Summary

Specialized Golang Systems Engineer and Exploit Researcher with a proven track record of architecting mission-critical infrastructure at a national scale. I bridge the gap between high-performance backend engineering and offensive security, having developed advanced WAFs and integrity monitoring systems that protect data for millions of users.

My expertise lies in building hyper-scalable services using gRPC and concurrency patterns, while simultaneously identifying deep-seated vulnerabilities through binary exploitation and automated fuzzing. I thrive in high-stakes environments where system performance must be matched by ironclad security, delivering optimized code that is as fast as it is resilient.

High-Performance Systems

Architecting scalable microservices with Golang

Security Research

Exploit research and vulnerability identification

Performance Optimization

40%+ backend performance improvements

Mission-Critical

99.9% uptime for essential services

02

Experience

Go Backend Developer

Jan 2025 - PresentEthiopia

Architected and scaled mission-critical backend microservices for a national government initiative using Golang, supporting a user base of millions.

Focused on high-concurrency engineering and security, optimized data pipelines to handle 2,000+ requests per second while conducting deep-dive exploit research to secure sensitive national infrastructure.

By implementing advanced caching and gRPC-based communication, improved system response times by 35% and ensured 99.9% uptime for essential public services.

35% improvement in response times
Millions of users supported
99.9% uptime achieved
03

Featured Projects

High-performance security systems and monitoring solutions

Abyshield Advanced WAF

Dec 2023

Engineered a high-performance Web Application Firewall (WAF) from scratch using Golang, capable of processing 5,000+ requests per second with sub-millisecond latency.

  • Developed a custom reverse-proxy engine that performs real-time inspection of Layer 7 traffic
  • Utilized regex-based signature matching and behavioral analysis to mitigate OWASP Top 10 threats like SQLi and XSS
  • Achieved sub-millisecond latency with 5,000+ RPS processing capability
  • Implemented rate limiting and DDoS protection mechanisms
  • Built custom rule engine for dynamic threat detection
GolangReverse ProxyLayer 7 InspectionOWASP Top 10gRPCRedis

Detectify

2024

Built a distributed Integrity Monitor in Go to detect unauthorized changes to national web assets.

  • Implemented DOM-tree structural analysis and SHA-256 checksums to achieve 99.9% detection accuracy
  • Optimized a high-frequency polling engine using Goroutines, reducing incident detection time from minutes to seconds
  • Distributed architecture for monitoring multiple national web assets simultaneously
  • Real-time alerting system with webhook integrations
  • Historical change tracking and audit logging
GolangGoroutinesSHA-256DOM AnalysisDistributed SystemsPostgreSQL

High-Performance API Gateway

2024

Designed and implemented a scalable API Gateway handling 10,000+ concurrent connections with intelligent routing and load balancing.

  • Built using gRPC for inter-service communication with Protocol Buffers
  • Implemented circuit breaker pattern for fault tolerance
  • Dynamic service discovery and health checking
  • Request/response transformation and middleware pipeline
  • Comprehensive metrics and distributed tracing
GolanggRPCKubernetesPrometheusGrafanaConsul

Distributed Cache Layer

2024

Developed a high-throughput caching system using Redis with custom sharding and replication strategies.

  • Implemented consistent hashing for distributed caching
  • Cache invalidation strategies with TTL management
  • Achieved 99.99% cache hit rate through intelligent prefetching
  • Multi-region replication for disaster recovery
  • Real-time cache analytics and monitoring dashboard
GolangRedisCluster ModePub/SubLua Scripting
04

Technical Skills

Expertise across concurrency, APIs, databases, and system architecture

Concurrency

  • Goroutines
  • Buffered/Unbuffered Channels
  • sync.WaitGroup
  • sync.Mutex
  • sync.RWMutex
  • context package
  • select statements
  • Worker pools
  • Pipeline patterns

API Protocols

  • gRPC
  • Protobuf (Protocol Buffers)
  • RESTful API design
  • WebSockets (Gorilla)
  • HTTP/2
  • GraphQL
  • Message queues (RabbitMQ)

Databases

  • PostgreSQL (Execution Plans, Indexing)
  • Redis (Caching, Atomic Counters)
  • GORM
  • Database migrations
  • Query optimization
  • Connection pooling
  • Transaction management

Architecture

  • Hexagonal Architecture
  • Domain-Driven Design (DDD)
  • Microservices
  • Event-driven architecture
  • CQRS pattern
  • Service mesh
  • API Gateway

Security

  • Web Application Firewalls
  • OWASP Top 10 mitigation
  • Binary exploitation
  • Automated fuzzing
  • Vulnerability research
  • Security auditing
  • Penetration testing

DevOps & Tools

  • Docker & Kubernetes
  • CI/CD pipelines
  • Git version control
  • Linux system administration
  • Monitoring & logging
  • Performance profiling
  • Load testing