simo@dev:~$ cat ~/about.md

Simone Di Mauro

  • Backend Developer
  • Security Specialist
  • Software Architect

Crafting robust backend systems and securing digital infrastructure. I turn complex problems into elegant, scalable solutions.

I work across the whole path of a backend: REST APIs and data models, the architecture that keeps them maintainable, and the infrastructure they run on, from Linux hosts to DNS, TLS and cloud platforms. Security is part of the design, not a final check: penetration testing, vulnerability assessment and hardening, and automation that keeps those checks in the release pipeline.

Recent work includes Mafdet, a local LLM runner that prefills and reasons while you type, and this site, a static Astro build behind a single Cloudflare Worker with a hardened contact API.

available for hire # open to new projects · collaborations · security research · backend challenges
whoami.jpg
Portrait of Simone Di Mauro

simo@dev:~$ htop --filter=skills --list

  • PID 001

    Backend Development

    Scalable REST APIs and server architectures. Node.js, Python, Java.

  • PID 002

    Database Design

    Schema optimization with PostgreSQL, MongoDB, Redis.

  • PID 003

    Cybersecurity

    Penetration testing, vulnerability assessment, hardening.

  • PID 004

    Software Architecture

    Maintainable systems using modern design patterns and DDD.

  • PID 005

    Cloud Infrastructure

    AWS, Azure, GCP — deploy, scale, monitor.

  • PID 006

    Security Automation

    CI/CD security pipelines and automated threat detection.

simo@dev:~$ cat ./how-i-work.log

  • SSH · srv/linux-core

    Linux daily driver

    Comfortable with Linux for shell work, processes, permissions, services, logs and terminal-driven automation.

    This means faster onboarding on real servers, less operational friction and more autonomy during debugging.

  • DNS · dns-zone.edge

    Domains and DNS management

    Comfortable working with domains, DNS records, propagation, subdomains, mail routing and connected configurations.

    For a company this means connecting apps, websites, email and environments quickly, without getting stuck on infrastructure details.

  • TLS · tls-certificate.chain

    TLS, certificates and HTTPS sanity

    I pay attention to certificates, HTTPS, redirect hygiene, browser trust warnings and the consistency of the public layer.

    That reduces customer-facing issues and improves perceived product reliability from the very first visit.

  • CI · deploy-pipeline.rel

    Deploy and release discipline

    I care not only about writing code, but also about shipping it through a clean, readable and repeatable release flow.

    A company gets less release chaos, clearer handoffs and someone who can contribute to delivery, not just implementation.

  • SYS · logs-monitor.bus

    Logs, monitoring and issue hunting

    I like reading signals, errors and odd behavior to reconstruct where the flow is actually breaking.

    That is extremely useful when real issues need to be understood quickly instead of being approached by blind trial and error.

  • SMTP · mail-delivery.mx

    Email delivery and public-facing ops

    Familiar with the operational details that keep contact flows, forms, delivery and domain credibility working smoothly.

    These are not glamorous topics, but they directly affect leads, support flows and online reputation.

simo@dev:~$ ls /usr/local/bin/*

./programming/

  • Java
  • TypeScript
  • JavaScript
  • Python
  • PHP
  • SQL and PL/SQL
  • C
  • C++

./backend/

  • Spring Boot (Security, Data JPA, WebSocket)
  • Node.js
  • Express
  • REST APIs
  • OAuth2 and JWT

./frontend/

  • React
  • Astro
  • Next.js
  • Tailwind CSS
  • Vite
  • HTML5
  • CSS3
  • Bootstrap

./databases/

  • MariaDB
  • MySQL
  • PostgreSQL
  • Oracle
  • Redis
  • Drizzle ORM

./devops-cloud/

  • Docker and Compose
  • Linux
  • Nginx
  • GitHub Actions
  • Cloudflare Workers
  • Vercel
  • Kubernetes (basics)

./security/

  • OWASP Top 10 (SQL injection, XSS, CSRF)
  • password hashing
  • rate limiting
  • IP allowlists
  • CSP
  • Turnstile

./networking/

  • MikroTik
  • UniFi
  • phpIPAM
  • DNS
  • TLS

./tools/

  • Git
  • GitHub
  • GitLab
  • IntelliJ IDEA
  • VS Code
  • DBeaver
  • MySQL Workbench
  • Linux
  • macOS
  • Windows

# Let's build, break or secure something.