RH Rezene Hagos
Resume
Engineering Doctorate (EngD) in Software Technology
Eindhoven University of Technology

Rezene Hagos Gebreslassie

Software Architect / Full-Stack Engineer / AI Engineer / Product Security / DevSecOps

Over a decade of turning ideas into enterprise software for healthcare, pharmaceuticals, construction, InsurTech, semiconductors and cybersecurity, now focused on secure, traceable software systems, DevSecOps and LLM-based AI agents.

View my resume Get in touch
Portrait of Rezene Hagos Gebreslassie
Eindhoven, NLOriginally from Mekelle, Ethiopia
10+years building production software
1,000+agencies on the multi-tenant insurance platform he re-architected
2companies he co-founded: Twinsoft Technologies and the NGO Being Human for Humanity
0.86 F1SecEvalAgent, his AI security reviewer, on a labelled benchmark
01

Biography

Rezene Hagos Gebreslassie holds an Engineering Doctorate (EngD) in Software Technology from Eindhoven University of Technology. In collaboration with ASML, he successfully completed an industrial engineering project on product security and software compliance: designing and implementing a vendor-neutral benchmarking and decision-support framework to evaluate on-demand antimalware solutions. The project brought together software architecture, cybersecurity, test automation, performance measurement, evidence management and multi-criteria decision analysis.

He holds a B.Sc. in Electrical and Computer Engineering and an M.Sc. in Computer Engineering from Mekelle University in Ethiopia, and has more than ten years of experience building production software across Java and Node.js backends. As lead backend engineer at Medco Technology Solutions, he re-architected a national insurance platform serving 1,000+ agencies into multi-tenant microservices with an in-house API gateway and SSO/RBAC layer, while it stayed live. Before that, he co-founded Twinsoft Technologies and led its backend engineering, including a regional COVID-19 laboratory information system that automated 5,000+ test results a day, and built healthcare interoperability and EMR systems as a senior full-stack developer.

His professional interests lie at the intersection of scalable and traceable software systems, DevSecOps and secure software development: he builds security checks into continuous integration and continuous delivery (CI/CD) pipelines (GitHub Actions, SARIF reporting, merge gating on verified findings), secure-by-default services with SSO/RBAC, and containerised deployments on Docker and Kubernetes. He is particularly focused on translating complex organizational requirements into executable evaluation methods, supporting transparent, evidence-based technology decisions, and building AI agents and RAG pipelines that are tested, measured and grounded in real data. Beyond his professional work, he co-founded the Ethiopian NGO “Being Human for Humanity” and volunteers as a program coordinator supporting women and children.

02

Experience & education

From full-stack developer to lead backend engineer, software architect, and AI and product security engineer.

  1. Full Stack Developer (Product Security Engineer)

    Nov 2025 – Oct 2026
    ASML, Veldhoven
    • Designed and developed an antimalware benchmarking framework for security tooling: a FastAPI backend with PostgreSQL for evaluation data and results, and a Streamlit interface for engineers and security stakeholders.
    • Built a data-driven, MITRE-aligned methodology that scores tools against threat landscapes and system constraints, with resource-consumption analysis proving zero-footprint operation in production.
    • Acted as technical bridge between corporate security and product engineering teams, turning requirements into backend services and engineering controls.
    Python · FastAPI · PostgreSQL · Streamlit · BDD · TDD

  2. AI Engineer

    Aug 2025 – Oct 2025
    TU Eindhoven (SEC Group), Eindhoven
    • Designed and productionised a RAG pipeline for Autoflow, a security team’s incident-log software, grounding LLM output in MITRE ATT&CK over a vector database, with knowledge updates that need no retraining.
    • Built systematic LLM evaluation with DeepEval and G-Eval; benchmarked five candidate LLMs for local deployment and selected Qwen3-4B, which matched a 20B model on coherence at a fraction of the resource cost.
    Python · LLMs · ChromaDB · LM Studio · DeepEval · Elasticsearch

  3. Software Architect

    May 2025 – Jul 2025
    ASML, Veldhoven
    • Led the architectural design of a unified IDE extension integrating fragmented model-based testing (MBT) toolchains into a single developer workflow.
    • Improved stability and security by refactoring internal communication from WebSockets to stdio; integrated the Language Server Protocol and BPMN4S modeller for real-time in-IDE validation.
    Java 21 · Python · TypeScript

  4. Software Designer & Test Manager

    Feb 2025 – Mar 2025
    Mind Your Pass, Eindhoven
    • Designed a high-security cryptographic integration bridging patented vaultless password technology with crypto wallets, delivering a PoC that translates 256/512-bit entropy into BIP-39 mnemonics.
    • Secured the development pipeline with SonarQube for static application security testing (SAST) and code quality.
    Python · TypeScript

  5. Lead Backend Engineer

    Dec 2022 – Oct 2024
    Medco Technology Solutions PLC, Addis Ababa
    • Designed and deployed the insurance platform niscofetap.com, supporting 1,000+ agencies and 50+ branches and processing 3,000+ new insured persons daily.
    • Re-architected a legacy single-client system into a resilient multi-tenant microservices platform, building the Node.js API gateway (with Redis caching) and the identity/access management layer (SSO, RBAC) in-house.
    • Directed technology stack selection and deployed solutions across hospitals, pharmacies and insurance companies.
    Node.js · Java (Spring Boot) · Hibernate · Redis · Vue.js · MongoDB · PostgreSQL · AWS

  6. Co-founder & Lead Backend Engineer

    Feb 2019 – Nov 2022
    Twinsoft Technologies, Mekelle
    • Led backend engineering across projects, with code review, automated testing and live alerting for 24/7 uptime.
    • Engineered the backend for a regional COVID-19 Laboratory Information System automating 5,000+ daily test results, plus a tracking and surveillance platform for regional health authorities.
    Java (Spring Boot) · Vue.js · Node.js · React · TypeScript · MongoDB · PostgreSQL

  7. Senior Full Stack Developer

    Mar 2017 – Jan 2019
    Medco Technology Solutions, Mekelle
    • Architected and deployed an enterprise interoperability mediator using OpenHIM/OpenHIE, enabling secure, real-time data exchange across hospitals and regional Health Information Exchanges.
    • Designed and developed a hospital EMR and e-prescription system, digitising clinical workflows.
    Java (Spring Boot) · Hibernate · Node.js · TypeScript · React · PHP · MySQL · MongoDB

  8. Full Stack Developer

    Feb 2013 – Feb 2017
    Mekelle University, Mekelle
    • Automated material planning, logistics and QA/QC workflows across 10 warehouses and 8 production lines.
    • Built a custom end-to-end ERP system for a Tier-1 construction company, from bidding to project completion.
    • Built network monitoring with real-time device failure detection and remote configuration, reducing downtime.
    PHP · JavaScript · Java · Aglets · MySQL

Education

  • Oct 2024 – Oct 2026Engineering Doctorate (EngD) in Software TechnologyEindhoven University of Technology
  • Oct 2014 – Mar 2017MSc in Computer EngineeringMekelle University, Ethiopian Institute of Technology
  • Oct 2008 – Jul 2012BSc in Electrical & Computer EngineeringMekelle University, Ethiopian Institute of Technology

Awards & volunteering

  • 2020Grand Challenges Ethiopia AwardeeArmauer Hansen Research Institute (AHRI): $10,000 for a software solution addressing adolescent sexual and mental health
  • 2021 – PresentCo-founder & Volunteer, Being Human for HumanityNGO empowering women and children in need in Ethiopia
  • 2024Librarian, EngD Software TechnologyLibrary services for trainees, including the e-book and hard-copy catalogues
  • Technical Lead, $3M DatacenterMekelle University datacenter project
  • CCNA & HCNACisco and Huawei Certified Network Associate

Hobbies

A foosball table seen from above
  • Foosball masterTable football is his game, and he is the master of it.
  • Table tennisHis other favourite table game.
03

Skills

Dots show a self-assessed level on a five-point scale. The tags under each group list further tools and techniques.

Backend & APIs

Java, Node.js
Spring Boot, Spring Cloud
RESTful API
Python, C++, C
Hibernate (JPA)FastAPISQLAlchemyAlembicOpenAPIJava 21Aglets

Architecture & distributed systems

Software design patterns
Cloud-native applications
Enterprise architecture
MicroservicesEvent-driven architectureApache KafkaAPI gatewaysRedis cachingMulti-tenancyModel-based testingLanguage Server ProtocolBPMN4S

Data & storage

MySQL, MongoDB
Azure Data Factory
Power BI
PostgreSQLRedisSQLiteElasticsearchKibanaChromaDBData ingestion pipelines

Cloud & DevOps

AWS (EC2, S3, RDS)
TDD
Continuous Integration & Delivery (CI/CD)
DockercontainerdKuberneteskindkubectlAzureAzure AI FoundryHetznerGitHub Actions (SARIF, PR gating)GitLab CIBDD (Cucumber, Gherkin)DevSecOpsLinuxWindowsBashPowerShell

AI & LLM engineering

LLM, AI agents
Multi-agent pipelinesRAGVector indexingHybrid retrievalPrompt engineeringTool use / function callingDeepEval / G-EvalPrecision / recall / F1LLM trade-off analysisClaude API & Anthropic SDKLangChainLangSmithLM StudioClaude CodeCodexCursorClineGitHub Copilot

Security

Crypto wallet & blockchain
SAST & secrets scanningSonarQubeSemgrepSARIF / code scanningFalse-positive triageOWASP Top 10MITRE ATT&CK & ATLASPrompt-injection defenceSecurity tooling benchmarkingAntimalware evaluationZero-footprint validationIAM architectureAuthentication / authorisationSSORBACMulti-tenant permission models256/512-bit entropyBIP-39Enterprise LAN securityTerminal security managementNetwork administrationstracetcpdumpnftablescgroupsPOSIX ACLs

Frontend & mobile

Vue.js, PHP, React, Angular
Flutter
MATLAB
TypeScriptJavaScriptStreamlit

Ways of working

Project management
Agile delivery on JiraCode reviewTechnical leadershipMentoringEvaluation-driven developmentCross-team influenceSecurity–engineering liaison

Languages

Tigrigna
Amharic
English
Dutch

Domains

Security & threat intelligenceSemiconductors & high-tech manufacturingHealthcare & digital healthInsurancePharmaceuticalsConstruction
04

Projects

EngD graduation project, in-house training projects with industry and research clients, course projects, industry and university projects from 2012 to 2024, and hobby projects.

EngD graduation project

Client
ASML
Nov 2025 – Oct 2026
Full Stack Developer (Product Security Engineer)

Vendor-Neutral Benchmarking & Decision Support for On-Demand Antimalware

An industrial engineering project on product security and software compliance, bringing together software architecture, cybersecurity, test automation, performance measurement, evidence management and multi-criteria decision analysis.

What I built

A benchmarking framework with a FastAPI backend and PostgreSQL for evaluation data and results, a Streamlit interface for engineers and security stakeholders, and an automated test suite measuring tool efficacy and resource consumption to prove zero-footprint operation in production.

Decision support

Derived runnable test cases from the company’s security requirements and evaluated every tool against them, aligned with MITRE threat landscapes and system-specific constraints. The results feed an evidence-based multi-criteria decision analysis (MCDA) that ranks the tools with TOPSIS and VIKOR in the analysis system.

Technology map

Benchmark platform core: REST API · Dashboard · Orchestration · Runner · Parsers · Persistence · Test cases · Scoring · Interfaces

DefineYAML, UI, requirements and test cases
ExecuteCLI adapters and OS automation
ObserveTracing, network and resources
ReportAPI, database and dashboard
Application & platform

Backend, API, dashboard, database, config and cross-platform execution

PythonFastAPIStreamlitGherkinPostgreSQLSQLAlchemyAlembicYAMLLinuxWindows
External scanner interface

Command execution, service inspection and scanner integration boundaries

BashPowerShellVendor CLIsystemdsystemctlcgroupsPOSIX ACLacl
Validation, tracing & measurement

Independent evidence for access behaviour, isolation, integrity and resource use

stracenftablesnfttcpdumpjqxmllintsha256sumpsutilGet-FileHashpidstattopuptime
Orchestration & automation

Container, Kubernetes and CI/CD contexts for advanced benchmark scenarios

DockercontainerdkindKuberneteskubectlGitLab CI
Dataset preparation

Archives, packages, images and binaries for realistic benchmark inputs

7zp7zipgzipbzip2xzZIPRARrpmcpiodpkg-debcabextractgcabmountDISM.exereadelfobjdump
BDD TDD MCDA TOPSIS VIKOR

In-house training projects

Client
MindYourPass
Feb 03 – Mar 23, 2025
Test Manager Software Designer
Team of eight

Secure Crypto Wallet Integration with MindYourPass

Proposed the solution that positions MindYourPass’s vault-less password manager as a fourth wallet model beside custodial, non-custodial and shared wallets: from a simple password, MYP generates either a 256-bit BIP-39-compatible entropy or a 512-bit post-quantum binary seed, with nothing stored. Built a PoC demo integrating the MYP browser plugin with a web crypto wallet on the Bitcoin network, and implemented the test-case scenarios for both approaches.

Technical goal

Develop a proof of concept, and design and implement a strategy method to generate wallet keys from entropy, seed phrase and private key.

Non-technical goal

Deliver test reports and retrospective presentations to stakeholders, strengthening presentation and communication skills with positive feedback from stakeholders and coach.

Software design: SFIA L3 → L4 Communication & networking: L2 → L3 Writing: L3 → L4
Client
ASML
Apr 28 – Jul 02, 2025
Software Architect Test Manager Software Designer
Team of four

Integrated Toolchain for Model-Based Interoperability Testing

Technical goal

Designed and implemented a factory method for the editor and a Singleton for the language-server instance. Performed domain analysis in IBM Rhapsody, modelled the IMBT toolchain as architect, and prepared model-based test cases as test engineer.

Non-technical goal

Prepare the ADD, test reports and progress presentations for stakeholders, strengthening presentation and communication skills with positive feedback from stakeholders and coach.

Software design: SFIA L3 → L4 Model-based systems engineering: L3 → L4 Communication: L2 → L3 Writing: L3 → L4
Client
TU/e SEC Group
Aug 2025 – Oct 2025
AI Engineer
Team of four

RAG Pipeline for Security Incident Analysis (Autoflow)

What I built

Designed and productionised a RAG pipeline for Autoflow, a security team’s incident-log software: ingestion, embedding, indexing and retrieval over a vector database, grounding LLM insights in MITRE ATT&CK with knowledge updates that need no retraining.

Evaluation & results

Built systematic LLM evaluation with DeepEval (faithfulness, relevancy) and G-Eval (coherence, consistency, fluency). Benchmarked five candidate LLMs for local deployment and selected Qwen3-4B, which matched a 20B model on coherence at a fraction of the resource cost.

Python LLMs ChromaDB LM Studio DeepEval / G-Eval Elasticsearch

Course projects

Jan 09, 2025SysML

Smart Monitoring System for Weather and Tsunami Detection

System Design Engineering course project (SMSWTD).

Group project
GitHub
Jan 10, 2025Architecture

Architectural Process Assignment

Problem-space analysis and solution design for wildlife spotting at Bainomugisha Natural Park.

Pair project
Jan 21, 2025Modeling

Tue Vaart Pound Lock System Analysis

System modeling course project.

Pair project
GitHub

Industry & university projects (2012 – 2024)

2023 – 2024InsurTech

Medical & Life Insurance Core System

Designed and implemented the core system for medical and life insurance, as backend developer.

Medco Technology Solutions PLC, an Ethiopian software company with founders from the USA, building insurance and healthcare platforms.
Spring Boot · Flutter · MySQL · Vue.js
2023 – 2024InsurTech

Foreign Employment Term Assurance Platform (FETAP)

Designed and deployed the insurance platform for workers going abroad on foreign employment, supporting 1,000+ agencies and 50+ branches and processing 3,000+ new insured persons daily, as backend developer at Medco Technology Solutions.

Nyala Insurance S.C., a private Ethiopian insurance company headquartered in Addis Ababa.
Spring Boot · MySQL · Vue.js
niscofetap.com
2019 · 2022 – 2023HealthTech

Bahmni EMR Implementation

Team lead for implementing Bahmni, the open-source electronic medical record (EMR) system, in 2019 and again in 2022–2023.

Quiha General Hospital, a general hospital in Mekelle, Ethiopia.
Spring Boot · Flutter · Vue.js
2020 – 2021Backend

API Gateway Middleware

Designed and implemented an API gateway middleware layer between front-end applications and backend services, as full-stack developer.

Node.js · Express.js · Vue.js · MongoDB
2020HealthTech

COVID-19 Laboratory Information System & Result Notification

Designed and implemented the laboratory information management system (LIMS) and notification service that delivered 5,000+ automated COVID-19 test results a day to people in quarantine, as backend developer at Twinsoft Technologies.

Tigray Regional Health Bureau, the regional government's public health authority.
Spring Boot · Flutter · Vue.js
2020HealthTech

COVID-19 Tracking & Surveillance Platform

Designed and implemented COVID-19 tracking software for following up cases during the pandemic, at Twinsoft Technologies.

Regional health authorities in Tigray, led by the Tigray Regional Health Bureau.
2018HealthTech

Electronic Prescription & Medical Records

Designed and implemented an electronic prescription system for web and mobile, together with electronic medical record (EMR) software, as full-stack developer.

Medco Technology Solutions PLC, for its hospital clients in Mekelle, Ethiopia.
2018Interoperability

Health Information Exchange Mediator

Designed and implemented interoperability mediators for OpenHIM, the OpenHIE interoperability layer, enabling secure, real-time data exchange between hospitals.

Medco Technology Solutions PLC, connecting hospitals and regional health information exchanges.
OpenHIM · OpenHIE
2017Security

LAN Terminal Security Management with Mobile Agents

MSc thesis project: designed and developed a terminal security management system for enterprise local area networks (LANs), built on mobile agents.

Mekelle University, a public university in Mekelle, Ethiopia.
Aglets · Java · PHP · Shell scripting
2016ERP

Construction ERP

Designed and developed an end-to-end enterprise resource planning (ERP) system, from bidding to project completion.

A Tier-1 building and road construction company in Ethiopia.
PHP · MySQL · Bootstrap · JavaScript
2015Manufacturing

Pharmaceutical Production & Quality Control

Designed and developed quality control, production, material planning and warehouse management software, through Mekelle University's University–Industry Linkage program.

Addis Pharmaceutical Factory (APF) S.C., an Ethiopian pharmaceutical manufacturer.
PHP · JavaScript · HTML · CSS
2014Networking

Network Monitoring & SMS Fault Notification

Designed and developed network device configuration and management, with fault detection and notification by SMS.

Mekelle University, across its inter-campus networks.
PHP · JavaScript · HTML · CSS
2012 – 2013Networking

Campus VoIP Telephony

Designed and implemented voice over IP (VoIP) telephony with Asterisk PBX and softphones, as network and system administrator.

Mekelle University, for telephony across its campuses.
Asterisk PBX · Softphones

Hobby projects

bunamind.com

Bunamind — Simple, for everyone

The home for my hobby products: AI agents, peer-to-peer connections, and security & blockchain infrastructure, built with one goal: make things simple for every human being.

Visit bunamind.com
AI AgentsAutonomous systems that handle the busywork.
Connecting PeopleNetworks and marketplaces that build trust.
Security & BlockchainIdentity, verification and traceability by design.
One accountSingle sign-on across every Bunamind service.
LiveAI Security

Sec Eval

Verified AI security review for code and configuration. A detector agent proposes vulnerabilities and an independent verifier tries to disprove each one; findings are grounded in CWE, OWASP Top 10 and MITRE ATLAS, and it runs as a GitHub Action with SARIF output and merge gating.

Python, FastAPI, Claude API, ChromaDB, React/TypeScript, Docker, Kubernetes
seceval.bunamind.com
LiveMarketplace

Kuchet

Peer-to-peer parcel delivery that connects senders with travelers already headed the same way, for cheaper international shipping backed by blockchain-powered traceability.

kuchet.bunamind.com
LiveAPI Gateway

Hamlet

The identity, security and API gateway platform behind every Bunamind product: one account for all services, sign-in with Google, Microsoft or Okta, and authenticator-app two-factor authentication.

hamlet.bunamind.com
05

Workshops & training

Hands-on workshops covering systems thinking, machine learning, real-time systems, DevOps, API design and containerization.

Jan 20–31, 2025Group

System Thinking

Infrastructure Aided Autonomous Bus (IAAB).

Multidisciplinary team of six: data science, mechatronics, human-system interaction, software and electrical engineering
Apr 01–04, 2025Pair

Machine Learning

Machine learning foundations: theory and practicum.

Apr 08–11, 2025Individual

RTA

Real-time systems analysis.

Apr 14–15, 2025Group

DevOps for Data

Data pipelines and serverless deployment with Azure Functions.

GitHub
Apr 16, 2025Individual

RESTful API Design

API design using HTTP and REST, by Egbert Algra (Thermo Fisher Scientific).

Apr 17, 2025Individual

GitHub Actions

Introduction to GitHub Actions and CI/CD workflows.

GitHub
Sep 2025Hands-on

Containerization

Container technology with Docker, and container orchestration with Kubernetes and Helm, by Egbert Algra (Thermo Fisher Scientific).