PCPatricio CalderonLinkedIn
Senior Software and Security EngineerN-00.01

Hello, I'm Patricio.

Building secure products, from idea to production.

I build products across UI/UX, backends, servers, and cloud infrastructure, drawing on nearly five years in cybersecurity.

StatusN-00.02
Open to selected freelance work
Base
Europe
Reach
Worldwide
Languages
ES · EN · FR
Capability singularityN-00.03
Move through the field

Web applications, mobile products, desktop software, backend systems, data pipelines, Rust, security, and product engineering.

Experience & recognitionN-00.04
CURRENTParity TechnologiesLed Security Intelligence
PREVIOUSCertiKBlockchain Security
OPEN SOURCEPSVMCreator of official SDK tooling
SPEAKERPolkadot DecodedSecurity talk, 2024
01 / PORTFOLIO

Selected work

Representative systems, responsibilities, and outcomes.

AI-driven security platformP-00

An AI-driven platform for investigating and addressing vulnerabilities across Parity's software stack and the Polkadot and Kusama ecosystems.

Challenge
Give developers a clear view of security risks across the SDK, runtimes, nodes, bridges, wallets, and applications, including vulnerabilities that could halt chains or drain funds.
Responsibility
Led the platform end to end, from architecture and implementation to production delivery, bringing together application security and product engineering.
Outcome
Helped teams detect and address vulnerabilities across Polkadot and Kusama, including chain-halting and fund-draining risks, with roughly $2.1B in network value at risk.
End to end
Design to production
AI-driven
Security investigation
Ecosystem
Polkadot + Kusama
  • Application security
  • AI
  • Codebase auditing
Live full-stack productP-01

A local-first AI reader that turns text, PDFs, EPUBs, and articles into synchronized audio on macOS and the web.

Challenge
Turn structurally different text, PDF, EPUB, and web content into one responsive read-along experience while running speech generation privately on the reader's device.
Responsibility
Sole designer and engineer. Built the shared reader engine, web and desktop applications, local inference backend, storage integrations, testing systems, packaging, and release pipeline.
Outcome
A live local-first product built independently from end to end, with private offline generation, synchronized word highlighting, project persistence, media export, and shared experiences across macOS and the browser.
2
Desktop + web apps
Local
Private AI inference
Solo
Built end to end
  • React
  • TypeScript
  • Tauri
Open-source toolingP-02

A self-initiated Rust CLI and library that became official tooling for managing Polkadot SDK dependencies.

Challenge
Polkadot SDK projects depend on many crates that move together, making manual version alignment slow and error-prone.
Responsibility
Independently conceived and built the tool on my own initiative, then continued contributing extensively to both PSVM and the wider Polkadot SDK.
Outcome
Adopted into Parity's official tooling and featured in the main README of Polkadot SDK, a framework with 2,800+ GitHub stars. Available as a CLI and Rust library.
Initiative
Independently created
Adopted
Official SDK README
Ongoing
PSVM + SDK contributions
  • Rust
  • Polkadot SDK
  • Cargo
Cross-chain protocolP-03

A zero-knowledge DEX prototype for atomic swaps and liquidity between Aleo and XDC or other EVM-compatible chains.

Challenge
Move value across different blockchain environments without introducing a trusted bridge operator.
Responsibility
Protocol and full-stack development in a four-person hackathon team.
Outcome
Won four ETHBarcelona prize tracks totaling more than $12,000, alongside 403 community votes and a $1,537 quadratic-voting match.
$12K+
Prize total
4
Winning prizes
403
Community votes
  • Aleo
  • Solidity
  • Zero knowledge
AdTech outreach platformP-04

A secure lead-intelligence platform that turns large publisher-domain datasets into qualified, review-ready outreach and CRM opportunities for ad networks.

Challenge
Coordinate slow and rate-limited enrichment providers, long-running background jobs, imperfect company and contact data, paid lookups, AI drafting, and human approval without losing workflow state or blocking the interface.
Responsibility
Product design and full-stack architecture across the review interface, durable workflow state, background processing, provider coordination, data normalization, security controls, AI-assisted drafting, and CRM integration.
Outcome
A recoverable lead-operations system that reduces manual research while preserving control over data quality, paid enrichment usage, generated messaging, duplicate handling, and CRM synchronization.
7
Persisted workflow stages
BullMQ
Durable job processing
2-step
CRM approval gate
  • Next.js
  • PostgreSQL
  • Drizzle
Publisher analytics & billingP-05

A full-stack platform that unifies advertising analytics, audience quality, consent signals, publisher operations, and invoicing in one interface.

Challenge
Combine high-volume time-series data, ad-server dimensions, display and video monetization, publisher configuration, and financial records without producing misleading aggregations or changing historical billing results.
Responsibility
Full-stack architecture and implementation across the dashboard, APIs, shared metric definitions, data access, authorization, revenue calculations, administrative workflows, and invoice generation.
Outcome
A unified operational foundation for publisher reporting and billing, with responsive multi-dimensional analysis, reproducible financial calculations, approval workflows, and auditable PDF invoices.
4
Analysis dimensions
2
Display + video
E2E
Analytics to invoices
  • Next.js
  • TypeScript
  • PostgreSQL
02 / PROFESSIONAL PROFILE

Experience & approach

Nearly five years in cybersecurity, alongside extensive product, UI/UX, backend, server, and cloud experience.

Professional profileN-02.01

Security depth. Experience across the stack.

I'm a software and security engineer with nearly five years in cybersecurity, focused on application security, codebase auditing, and vulnerability management.

I also have extensive experience in UI/UX design, backend development, servers, and cloud infrastructure, taking products from idea to production.

Education

INSA Lyon, France
MSc in Computer Science · Double degree
2021 - 2023
UTFSM, Chile
Computer Science
2017 - 2023
Experience logN-02.02
2023 to now

Parity Technologies

Application Security Engineer

Led Security Intelligence from design to production, and independently created PSVM, now official Polkadot SDK tooling.

2022 to 2023

CertiK

Blockchain Security Engineer, promoted from Security Intern

Audited Rust and Solidity projects for Aptos, OKX, and other major ecosystems. Found critical and high-severity vulnerabilities in my first three months as an intern, earned a full-time offer, and won multiple Best Finding of the Month awards with monetary bonuses.

2021 to now

KRYPTOSPHERE

Web3 Developer

Co-developed AtomiK, winning four ETHBarcelona 2023 prize tracks totaling more than $12,000.

2020 to 2021

Envision

Software Developer

Built e-signature workflows, company web products, and Microsoft Azure and SharePoint integrations for real-estate operations.

03 / PUBLIC WORK

Speaking & security

Public work that can be independently reviewed.

Conference talkN-03.01

Securing the Polkadot Ecosystem

Presented practical defense tools and introduced the Polkadot Security Hub at Polkadot Decoded 2024 in Brussels.

Watch the official talk
Security infrastructureN-03.02

Polkadot Security Hub

Contributed to a public home for vulnerability disclosures, remediation guidance, threat models, and security resources.

Visit the Security Hub
04 / CAPABILITIES

Engineering services

End-to-end engineering for products, platforms, and technically demanding systems.

ServiceN-04.01

Security & codebase auditing

Application security, Rust and Solidity code reviews, vulnerability investigation, and practical remediation guidance.

ServiceN-04.02

Product development & UI/UX

Interfaces and complete web, mobile, and desktop products, from user experience and visual design through production delivery.

ServiceN-04.03

Backend & cloud infrastructure

Backend services, APIs, data pipelines, databases, servers, and cloud deployments built for dependable operation.

Professional inquiriesN-05.01

Project inquiries

Send me the rough version. Tell me what you want to build, what feels difficult, and what a good result would look like.

Message me on LinkedIn