DC / SOFTWARE
Software Engineering studentColombia · remote

Daniel Castrillon builds dependable software at the edge of product, AI, and security.

I am a Software Engineering student, graduating in April 2028, and a practicing engineer and Tech Lead. I care about shipping systems people can trust, maintain, and improve.

Building from Colombia for teams that value thoughtful engineering and visible evidence.

2028

expected Software Engineering graduation · April

Mitiquete

Software Engineer & Tech Lead

336

Secure Bench scanner/case combinations in its certified study

GHSA

public responsible-disclosure record

Production systems and public security tools.

A focused set of shipped platforms and inspectable tools, each paired with public evidence.

Project

Production platforms

What I work on

Led software architecture and AI-assisted engineering at Mitiquete, with product work across travel-platform discovery, quotations, booking, publishing, authentication, PostgreSQL, and AWS-backed media.

Project

SecureFlow

What I work on

A local-first Rust trust and evidence layer for authorized security research. It combines deterministic analysis, contextual review, reproducible evaluation, a versioned knowledge base, offline API inventory, and optional AI agents; human validation stays authoritative.

Evidence

Project

Secure Engine

What I work on

A local-first Rust analyzer for JavaScript and TypeScript. It follows untrusted data across files and helpers, then emits reproducible source-to-sink evidence through a CLI, native desktop UI, JSON, and SARIF.

Project

Secure Bench

What I work on

An independent, local-first Rust benchmark harness for static security analyzers. Its versioned contracts separate metrics, evidence, provenance, and failure accounting. Phase 30 certifies 336 scanner/case combinations with no scanner retries; it is explicitly a post-open recovery study, not a scanner ranking.

Strong systems start with clear boundaries.

AI agents & LLM reliability

Agentic workflows, clear task boundaries, evaluation-minded delivery, and human review where correctness matters.

Full-stack systems

TypeScript, React, Node.js, Python, PostgreSQL, Docker, AWS, and the product judgment to connect them.

Application security

Security tooling in Rust, practical threat-aware engineering, and evidence that makes findings actionable.

Use AI with discipline. Make the work inspectable.

Upstream open source

Public contributions make it possible to inspect the work itself. Daniel contributes focused fixes across developer tools and Linux ecosystems, including CLI behavior, desktop integration, CI, dependencies, and regression coverage.

View contribution activity
Responsible disclosure

Reported the Moderate Trigger.dev Slack OAuth integration-CSRF advisory, fixed in 4.5.12, and submitted a coordinated RustDesk report whose related fix was merged.

AI systems and research

AI agents work best inside explicit task scopes, deterministic controls, automated checks, reproducible evaluation, and human validation. Daniel also delivered an invited MPI-SP talk on structural security risks in AI-assisted software systems.

Profile and public work

Growing through real systems.

I am a Colombian Software Engineering student and working engineer. Mitiquete, Tripeuropa, open source, security research, and public Rust tooling keep my learning grounded in systems people actually use.

Education

Software Engineering · expected April 2028

Product and backend

TypeScript, React, Node.js, Python, PostgreSQL, authentication and authorization

Systems and delivery

Rust, Docker, AWS, Linux, GitHub Actions, AI agents, LLM reliability