Roman Rott's portfolio - Back-end developer. Security enthusiast

Dynamic Application Red Team Simulation

For BSG using Ruby Rails JavaScript React

Berezha is an Application Security and Penetration Testing Company. DARTS is the platform that simplifies penetration tests, automates report generation, and integrates external data sources.

Role:

Full-stack developer

Responsibilities:

Implemented the whole architecture, starting from the application design in the AWS cloud stack, configuring CI/CD, creating API services and UI applications, finishing implementing own web-design and writing the documentations.

Languages:

Ruby, JavaScript

Frameworks/Libs:

React, Redux

Other technologies:

AWS, S3, IAM

Status:

Internal project. Is online and works as a part of BSG's workflow.

https://bsg.tech/

Notification Engine

For Groupon using Ruby Rails

* Internal project. Under the NDA

Groupon is an US e-commerce marketplace. I was working on their notification engine that handles reservation related notifications for Online Booking. It consists of a web server and a set of background workers to send messages and receive callbacks from the SMS/Calls service.

Role:

Back-end developer

Responsibilities:

Languages:

Ruby 2

Frameworks/Libs:

Ruby on Rails, Resque, Redis, Groupon-specific services/APIs

Status:

Internal Groupon's project. Under the NDA

https://www.groupon.com/

Callback system

For Enova using Ruby Rails JavaScript

* Internal project. Under the NDA

Large enterprise project in financial sphere intended to optimize business processes of the loan company.

Role:

Team Lead.

Responsibilities:

Code reviews, estimating and allocating resources.

Decision-making and negotiating.

Writing new and refactoring legacy code.

Languages:

Ruby, JavaScript

Status:

Internal project. Is online and works as a part of Enova's products.

https://www.enova.com/

Chairlift(Better Feedback)

For Sphere Inc using Ruby Rails React JavaScript

Screenshot of Chairlift(Better Feedback) dashboard

Chairlift is a modern, cloud based HR solution that elevates employee performance and provides HR professionals with the insight to nourish workplace culture. It is an internal Sphere project I worked as a part of remote team.

Role:

Front-end, Back-end developer

Responsibilities:

Implemented several UI parts/features of the application using React, Redux and ES6. Worked on back-end entities.

Languages:

Ruby 2, ES6

Frameworks/Libs:

Ruby on Rails 4.2, React+Redux

Testing Frameworks:

Rspec, Factory Girl

Other technologies:

JSON, postgreSQL

Status:

Online.

https://chairlift.io

Chairlift Expenses

For Sphere Inc using Ruby Rails React JavaScript

* Internal project. Under the NDA.

Chairlift Expenses is an internal Sphere’s project for handling company's expenses. I was working on it starting from the initial proposal, planning and designing architecture and finishing implementing both front and back-ends of the project. Switched to another roject befor this one ended.

Role:

Team Lead

Responsibilities:

Code reviews, estimating and allocating resources, writing stories. Decision-making and negotiating, communicating with the project owner.

Writing code, making architectural decisions.

Languages:

Ruby 2, ES2016

Frameworks/Libs:

Ruby on Rails 5, React, Redux

Testing Frameworks:

Rspec

Status:

https://sphereinc.com/

FindMeGetMe.xyz - fake dating service.

For Roman Rott using Ruby

front-end of a CTF site with images served using Sockets

Screenshot of front-end of a CTF site with images served using Sockets

«FindMeGetMe» is a fake Dating website with an API for mobile application created for the CTF(Capture The Flag hacking game) organised for UISGCon 11(2015) - Ukrainian InfoSec conference held by Non-Government Organisation «Ukrainian Information Security Group»

This Fake Dating website was created for security enthusiasts and had no real users or profiles. It was created with a pre-defined vulnerabilities related to Redis and Sockets. I used a Free design and added vulnerable Rack application that gets photos from Redis service using Sockets technology.

Role:

Full-Stack developer, second Game-Master

Responsibilities:

Creating back-end, integrating free design, configuring and optimising web, Redis servers, monitoring services and the application during the games. Creating API for a mobile app.

Languages:

Ruby 2.2

Frameworks/Libs:

Sinatra

Other technologies:

Redis

Status:

Archived after the CTF's end.