Hi, I'm Carlos — a backend developer and cybersecurity student who builds APIs, command-line tools and automation with Python and Go, keeping a strong eye on red team concepts and application security.

I like turning repetitive, manual work into small, reliable software, and I care about clear project structure, honest documentation, secure design principles and code that is easy for the next person to pick up.

• Building secure REST APIs in Go with Gin: routing, handlers, health checks and request metrics.
• Designing APIs with FastAPI and SQLAlchemy on the Python side.
• Exploring application security, threat modeling, and red team fundamentals.
• Going deeper into Go: project layout, testing and CI with GitHub Actions.
• Automating file handling, data extraction and small ETL jobs, with a growing interest in RPA.

Languages

Backend & APIs

Databases

Security & Infrastructure

A local-first desktop password manager for keeping credentials without trusting a cloud service. The vault is a single file encrypted with Argon2id + AES-256-GCM, the master password is never written to disk and the app makes no network calls.
_{Go · Wails · JavaScript · security tests · GitHub Actions CI}

A lightweight API that monitors other APIs, so you know when a service is down or slow. It runs health checks and tracks latency and request metrics, with the code split into cmd/ and internal/ packages and a Docker Compose setup.
_{Go · Gin · Docker}

A CLI that removes the repetitive setup of starting a FastAPI project: it generates the folder structure and base files from templates embedded in the binary with go:embed. Early stage, with planned features documented.
_{Go · FastAPI templates}

_{Also worth a look: sacoli — REST API in Go with Gin and Swagger docs · FlowDesk — ticket API with FastAPI, SQLAlchemy and SQLite · HardPass — password strength CLI in Go}

The best way to reach me is on LinkedIn.