marsultor/resume-cv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

projects: add exalock (WIP) and browser-sec PoC, reframe SSH server as hardening PoC

Browse Source
This commit is contained in:
OpenCode Worker
2026-07-06 17:45:43 -05:00
parent 80d29aed10
commit 0d459409ce
1 changed files with 12 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
resume.tex
View File

@@ -136,20 +136,24 @@
\section{Projects}
\resumeSubHeadingListStartBullets
\resumeSubItem{Real-Time Quantitative Analysis Streamer}
{Independently engineered a high-frequency financial data ingestion and analysis platform for a family quant team, sustaining \textbf{100K datapoints/s} via Kafka, Mosquitto MQTT, and DXLink streaming. Integrated Tastytrade APIs and Paho clients with a ClickHouse backend for low-latency tick storage and real-time analytics. Developed C++-based computational modules executing LSTM-driven predictive models alongside live Heston and Black–Scholes pricing for SPX, NDX, and derivative instruments. Built a Grafana observability dashboard for latency, spread, and volatility metrics, enabling continuous AI-enhanced market insight and fully automated pipeline reliability—driving a \textbf{60\% portfolio profit in Q1 2025}.}
\resumeSubItem{exalock --- GPU-First Wayland Lockscreen \normalfont(WIP, \href{https://git.cyber.ayyalasomayajula.net/marsultor/exalock}{source})}
{Building a from-scratch, zero-toolkit lockscreen for Hyprland/Wayland in C/C++23 and GLSL, speaking raw Wayland protocols (\texttt{ext-session-lock-v1}) with per-output lock surfaces, EGL contexts, and a frame-callback-driven OpenGL ES render loop. Engineered a GPU ``silk'' particle simulation from first principles: divergence-free stream-function velocity fields integrated with RK4 and vorticity-based color mapping. PAM authentication and hardening are in active development.}
\resumeSubItem{Real-Time Quantitative Analysis Streamer \normalfont(closed source)}
{Independently engineered a high-frequency financial data ingestion and analysis platform for a family quant team, sustaining \textbf{100K datapoints/s} via Kafka, Mosquitto MQTT, and DXLink streaming. Integrated Tastytrade APIs and Paho clients with a ClickHouse backend for low-latency tick storage and real-time analytics. Developed C++ computational modules executing LSTM-driven predictive models alongside live Heston and Black--Scholes pricing for SPX, NDX, and derivative instruments, with Grafana dashboards for latency, spread, and volatility observability.}
\resumeSubItem{MQTT-to-Push Notification Pipeline \normalfont(\href{https://git.cyber.ayyalasomayajula.net/marsultor/push-notification-mqtt}{C++} $\cdot$ \href{https://git.cyber.ayyalasomayajula.net/marsultor/push-notification-mqtt-rust}{Rust} $\cdot$ \href{https://git.cyber.ayyalasomayajula.net/marsultor/news-feed-notifications}{RSS})}
{Architected a three-service notification backbone ingesting MQTT5 messages and delivering mobile push via \texttt{ntfy.sh}. Benchmarked head-to-head C++ (Paho) and Rust (rumqttc/tokio) consumers, with the async Rust rewrite sustaining \textbf{10M notifications/s} at 1KB payloads and adding tap-to-open link actions. Built the Python RSS producer with MD5-hash deduplication and QoS-1 MQTT publishing; the pipeline has relayed \textbf{10k+} real-time news alerts to devices since August 2025.}
\resumeSubItem{Matrix FS}
{Developed a Layer 2 distributed storage protocol atop IPFS, implemented in Rust with a performant Tauri-based Svelte frontend. Engineered end-to-end encrypted file sharing using AES-256-CBC and ChaCha20-Poly1305 AEAD schemes with deterministic tokenization for content addressing. Extended IPFS functionality with MIME type encoding to enable file-type-aware decentralized storage and retrieval. Integrated SurrealDB ticketing over Tor hidden services to facilitate privacy-preserving access control and auditability.}
\resumeSubItem{Matrix FS \normalfont(closed source)}
{Developed a Layer 2 distributed storage protocol atop IPFS in Rust with a Tauri/Svelte frontend. Engineered end-to-end encrypted file sharing with AES-256-CBC and ChaCha20-Poly1305 AEAD, deterministic content-addressing tokens, MIME-aware retrieval, and SurrealDB ticketing over Tor hidden services for privacy-preserving access control and auditability.}
\resumeSubItem{Home Infrastructure and OSS Deployment}
{Designed, implemented, and maintain a scalable, enterprise-grade self-hosted infrastructure supporting ~50 concurrent users with partial monetization. The system architecture includes three high-availability servers orchestrating over 40 Docker containers leveraging microservices for mail servers (Postfix, Dovecot), LangChain and LangFlow NLP automation workflows, n8n event-driven automation, multicast RTP streaming clusters, WireGuard VPN mesh networking, and multiple static/dynamic web services. Contributed upstream patches and custom modules to OSS projects, while developing bespoke tooling for advanced network routing, storage management ($\ge$ 150 TB NAS with ZFS), container orchestration, and secure access gateways following zero-trust principles.}
{Designed, implemented, and maintain self-hosted infrastructure supporting ~50 concurrent users with partial monetization. Operate three high-availability servers and 40+ Docker containers across mail (Postfix/Dovecot), LangChain/LangFlow NLP workflows, n8n automation, RTP streaming, WireGuard mesh networking, and static/dynamic web services. Built custom tooling for routing, 150TB ZFS-backed NAS storage, container orchestration, and zero-trust secure access gateways.}
\resumeSubItem{CyberPatriot Automation Scripts for USAF}
{Developed a comprehensive suite of proprietary automation scripts in Rust and PowerShell to optimize vulnerability scanning and exploitation tasks for USAF CyberPatriot teams. The Unix-based scripts consistently contributed over 30 points per competition round by rapidly identifying and mitigating security flaws on Linux/Unix targets with sub-2-minute execution times. Windows counterparts, built in PowerShell, achieved over 25 points regularly. The toolkit was later licensed and transferred to another CyberPatriot team for ongoing development and competitive use.}
\resumeSubItem{SSH-Driven Portfolio Site}
{Deployed a web-accessible terminal prompt at \href{https://krishna.ayyalasomayajula.net}{krishna.ayyalasomayajula.net}, inviting users to connect via \texttt{ssh krishna@krishna.ayyalasomayajula.net} for a fully interactive TUI showcase. Designed with Next.js and Tailwind CSS, featuring Aceternity-inspired cursor effects and a cinematic blur aesthetic. The SSH endpoint launches a native C++ FTXUI interface highlighting projects, real-time system status, and personalized Easter eggs, emphasizing a hacker-first, command-line-native identity.}
{Developed a comprehensive suite of proprietary automation scripts in Rust and PowerShell for vulnerability remediation/hardening automation for USAF CyberPatriot teams. The Unix-based scripts consistently contributed over 30 points per competition round by rapidly identifying and mitigating security flaws on Linux/Unix targets with sub-2-minute execution times. Windows counterparts, built in PowerShell, achieved over 25 points regularly. The toolkit was later licensed and transferred to another CyberPatriot team for ongoing development and competitive use.}
\resumeSubItem{Browser-Security Red-Team PoC \normalfont(educational; \href{https://git.cyber.ayyalasomayajula.net/marsultor/linkedin-bot}{source})}
{Built, in under 12 hours, a TypeScript/Bun + Playwright proof of concept demonstrating how stealth-patched headless browsers defeat commercial bot detection: \texttt{dom.webdriver} suppression, fingerprint-evasion plugins, and authenticated session-state reuse driving fully automated crawling and interaction on a major professional network. Documents concrete gaps in client-side bot defenses; for educational purposes only.}
\resumeSubItem{Hardened SSH Portfolio Server --- Security PoC}
{Deliberately exposed a self-built stack --- native C++ FTXUI terminal UI over SSH (\texttt{ssh krishna@krishna.ayyalasomayajula.net}) plus a Next.js/Tailwind front end --- on a bare-metal production server with full home-LAN access, as a live proof of concept of my code and system hardening. Survived \textbf{1M+ automated attacks from 100 countries} over 18 months of continuous operation with zero compromise.}