// software engineer · software security
Farzan Khalili
I build systems that are reliable, scalable, and secure — and that hold up when someone tries to break them. Open to remote collaborations.
// about
About me
I like making things that just work — under pressure, in production, and even when someone tries to break them. I care about architecture: clean layers, clear boundaries, and minimal complexity. I write code that's meant to last.
Security shapes how I approach engineering. I think about bugs that actually matter — logic flaws, memory issues, design oversights — and how to avoid them from the start. I've spent time on auditing, fuzzing, and reverse engineering, and that mindset carries into everything I build.
"Assume compromise. Build accordingly."
// projects
Selected work
Personal and open-source projects.
guddy-cn
Cloud-native fitness API built with Go. Microservices architecture with a gateway service and an exercises service, PostgreSQL backend, Kubernetes deployment, and full Swagger/OpenAPI documentation.
SourceSec
Static source code analysis web application. Scans codebases for security vulnerabilities and code quality issues through a Django-powered interface.
topTyper
Terminal-based typing speed game built as a TUI application. Tracks WPM, accuracy, and progress across sessions.
25Blackjack
Custom Blackjack variant with a Monte Carlo reinforcement learning agent. Explores policy evaluation and control through game simulation.
// experience
Where I've worked
Software Engineer
Rayan Samaneh Arka- Contributed to design and development of email infrastructure products, from system architecture and security planning through to end-to-end implementation.
- Developed and maintained backend components for email server and related infrastructure products.
- Established coding standards, Git workflows, and technical documentation practices across the engineering team.
- Reviewed and updated compliance documentation to support lab regulatory requirements.
Penetration Tester
Shiraz CERT- Conducted penetration tests on web applications and network systems, identifying vulnerabilities and assessing security risks.
- Used Burp Suite and other industry-standard tools to perform vulnerability assessments.
- Delivered detailed reports with risk assessments and actionable remediation recommendations.
Software Developer
Novin Robat Sazan Emrooz- Built a signal generation tool using a computer's sound card to emit configurable stereo signals with specified frequency and waveform.
- Developed a real-time GUI to monitor and visualize signals as they are emitted.
// education
Master's degree, Digital Forensics
Tarbiat Modares University
Bachelor of Science, Computer Science
Urmia University
// contact
Get in touch
Open to new roles, collaborations, or just a conversation. Reach out and I'll get back within 24 hours.