About
I trained as a software developer and now work in DevSecOps. I joined RiskStudio as an intern in February 2026, building full-stack features in Django REST Framework and Next.js. For my MBO graduation project I then built an AI-powered security gate in their GitLab CI/CD pipeline, and since August 2026 I have been a software engineer in DevSecOps at RiskStudio.
Alongside my job I am studying for a BSc in Information Technology at HAN. Longer term I want to grow into cloud security.
Experience
Aug 2026 – present
Software engineer, DevSecOps
RiskStudio is a start-up building a security-focused SaaS product.
Jul – Aug 2026
DevSecOps graduation project
- Designed and built an AI security gate for GitLab CI/CD, working closely with a mentor in a live product environment.
- Packaged it as a reusable GitLab CI/CD component, so security triage works the same way across multiple repositories.
- Wrote a Python engine that parses SAST and SCA reports and decides whether the pipeline may continue.
- Used LLMs to analyse and prioritise findings in context, and filtered out low-confidence alerts to reduce scan noise and false positives.
- Integrated the gate into CI/CD, so it enforces compliance standards on every code merge.
Feb – Jul 2026
Software engineer
- Built a full-stack marketplace module with Django REST Framework and Next.js: custom API logic and frontend components that let workspace admins manage apps.
- Improved the reliability of API updates, reducing the risk of accidental data overwrites.
- Added database-level constraints in PostgreSQL so inconsistent data is rejected at the source.
Sep 2024 – Feb 2025
Software engineer
ICT@Work is an IT service provider for network and system management, cloud services, backup and recovery, and application support. I built software to streamline its administrative workflows and internal operations.
- Built the Volunteers web app in ASP.NET Core MVC and Entity Framework.
- Built a role-based dashboard in Blazor and MudBlazor for managing co-workers, user data and team assignments.
- Prototyped cross-platform mobile apps in .NET MAUI and C# to test UI design and local data storage.
- Worked in a team, using GitHub for version control.
Jul 2024 – Dec 2025
Sales employee
Developed communication and leadership skills in a customer-facing role.
Selected work
2026
AI security gate for GitLab CI/CD
A reusable pipeline component that parses SAST and SCA reports, uses LLMs to judge each finding in context and filters out low-confidence alerts before code is merged.
GitLab CI/CD, Python, LLMs, Semgrep, OSV-Scanner, Linux
2025Live
Stichting ProConnect website
The public website of Stichting ProConnect, built in Next.js and hosted on AWS Amplify with automatic deployments on every push.
Next.js, AWS Amplify
2025
Volunteers web app
An event platform in ASP.NET Core MVC and Entity Framework that connects volunteers with charitable organisations.
ASP.NET Core MVC, Entity Framework, Bootstrap
Education
In progress
HAN University of Applied Sciences
2023 – 2026
Astrum College (ROC A12)
Skills
- DevOps
- GitLab CI/CD, Docker, Kubernetes, Git, GitHub, Linux, Bash, Agile/Scrum
- Security
- SAST, SCA, IaC scanning, secret detection, Semgrep, OSV-Scanner, LLM-assisted triage
- Cloud & network
- AWS, Microsoft Azure (basics), TCP/IP, firewalls
- Programming
- Python, TypeScript, JavaScript, C#, SQL
- Frameworks
- Django REST Framework, Next.js, React, ASP.NET Core, Blazor, Entity Framework
- Databases
- PostgreSQL, Microsoft SQL Server
Contact
Email is the quickest way to reach me.
kyrmol@outlook.com