Student at Odisee University College

Specializing in Data & AI, System & Business Analysis, and System Administration with additional coursework in Networking & Cybersecurity and Advanced Software Development

• CCST Networking (Cisco)

Autonomous perpetual-futures trading system — Python, on-chain order signing, FastAPI + React 19 ops dashboard

• Risk-first design: hard no-liquidation constraint, enforced by controls that can only reduce exposure
• Cost-aware walk-forward research harness
• systemd-managed live deployment with operator alerting
• Source and strategy are private

Network topology and vulnerability mapper — Spring Boot 3.5 / Java 21 (virtual threads), React 19 + Vite + TypeScript

• Active nmap scanning (argv-only, injection-hardened) + passive pcap4j/ARP/mDNS/LLDP/CDP discovery
• OT/ICS read-only fingerprinting (Modbus/TCP, DNP3, S7comm, BACnet/IP) with function-code whitelist
• Threat-intel pipeline: NVD mirror (~250k CVEs), EPSS daily, CISA KEV → composite CVSS×EPSS×KEV×criticality risk score
• JGraphT attack-graph shortest path with ATT&CK technique edge annotation
• STIX 2.1 bundle export, TAXII 2.1 + MISP push
• Docker container discovery: local CLI, read-only host probe of Docker Engine and adjacent container-platform APIs (flags exposed :2375 daemons as CRITICAL), token-authenticated remote push agent
• JWT HS256 + BCrypt-12, per-IP login rate-limiting, append-only audit log, distroless runtime, CAP_NET_RAW only (no --privileged)
• NIST 800-53 control mapping (AC/AU/CM/IA/RA/SC/SI/SR), AAP-31 vocabulary cross-walk

Multi-source data-ingestion project: Belgian construction permit risk monitoring prototype — Python 3.12 (uv), Pydantic v2, SQLAlchemy 2.0 async, LanceDB, Streamlit

• Multi-source ingestion pipeline: Gent consultatieomgeving, Brussels OpenPermits (CoBAT), Vlaanderen Inzageloket (Playwright headed Chromium for Anubis-protected pages), RvVb precedent corpus
• Risk engine combining 14 deterministic rule categories with an LLM narrator (Anthropic Sonnet, GPT-4o fallback) and RvVb precedent retrieval over LanceDB (OpenAI text-embedding-3-large)
• Geopunt WMS/WFS spatial overlays, Lambert-72 to WGS84 geometry (pyproj), IIOA/MER heuristics, PDF feature extraction (pdfplumber)
• structlog JSON/console logging, alembic migrations, SQLite WAL, tenacity retry + circuit-breaker, throttled httpx HTTP client
• GDPR posture: no applicant names persisted, identified User-Agent, polite per-source rates, schema-drift lock tests
• 317 tests (314 passing) · 77% coverage

High-security Android notes app — Kotlin + Compose, defense-in-depth at rest

• Argon2id KEK (RFC 9106, calibrated per device) → random DEK double-wrapped (KEK + Keystore key) → SQLCipher 4.6.1 encrypted DB
• Wipe ladder (lock / crypto-erase / nuclear), panic PIN, 14-day dead-man check with HMAC attested clock
• Encrypted backup envelope: HSBK magic + Argon2id + AES/GCM + 4 KiB padding (file size only reveals a 4 KiB bucket)
• FLAG_SECURE recents blanking, CharArray passphrase hygiene, Detekt-enforced ban on android.util.Log
• Anti-oracle UI: collapses all auth failures to one indistinguishable error

Perpetual-futures trading bot for ApexOmni staking-factor optimization — Python 3.11+, Docker Compose, signed orders

• Maximizes Trading Activity Factor (+0.5) by trading 5 unique days/week with auto-selected cheapest tradeable symbol against current balance
• Ethereum key → ZK seeds / L2 key derivation helper for order signing; explicit testnet/mainnet network split with dry-run default and --live gate
• Hardcoded safety: minimum-size orders and a mandatory opposite-side market close right after every open, retried up to 5 times; circuit breaker (hardcoded 5-failure threshold)
• Once-per-UTC-day trade guard persisted in data/trades.json
• Runs via Docker Compose (health checks, graceful shutdown, log rotation) or can run as a scheduled daily GitHub Actions job
• 210 tests across unit, integration, and security suites

Portable Claude Code overlay — devcontainer-ready, hook-protected, multi-agent pipeline scaffold

• 45 native skills (analyze → plan → implement → review → ship), 22 specialized agents, 32 hooks (29 harness + 3 git)
• TDD-aware /pipeline routes by feature-name prefix (feat/fix/refactor/perf/test → tdd-test-writer → tdd-implementer; docs/chore/ci and other non-dev prefixes skip TDD)
• Hook protection: conventional-commit validation, attribution stripping, sensitive-file staging block, dangerous-command block, push-to-main block, plus advisory TDD-order checks
• MCP fleet: context7, serena (semantic), sequential-thinking, agentmemory, codegraph, graphify; LSP stack: pyright, typescript, csharp, gopls, rust-analyzer
• 5 cloud deploy targets (Azure, Vercel, Railway, Render, DigitalOcean) via per-provider agents + ops skills
• Supply-chain pinnable via env vars (SERENA_REF, CLAUDE_CLI_SHA256); atomic stage-and-rename install
• GitHub Codespaces / devcontainer entry point: open in container → post-create runs install.sh → claude

Super User | UPS Belgium - Customs Brokerage Department

• Conducted UAT testing, code reviews, and participated in agile standups
• Built department-wide SharePoint documentation system
• Created technical instruction documents for development teams