Eric San
Security-Focused Full-Stack Engineer
Singapore Citizen · ericsssan@gmail.com · github.com/ericsssan · linkedin.com/in/ericsssan
Summary
Full-stack engineer with 10 years of remote experience delivering secure-by-design web applications for client companies across Europe. I work the whole stack — web products in Next.js, React, Django, and Laravel, and AI/RAG systems in Go and Python — and own the cryptography and architecture that protect the data behind them. I also build the layers most engineers just consume: TLS/QUIC transport, type checkers, and static analyzers.
Technical Skills
Security: End-to-end encryption (E2EE), cryptographic primitives, penetration-testing remediation, secure development practices
Languages: TypeScript / JavaScript, Python, PHP, Rust, Zig, Go, SQL
Frontend: React, React Native (Expo), Next.js, Vue.js, Tailwind CSS, Flutter
Backend: Django, Django REST Framework, Laravel, Node.js
AI / LLM: Retrieval-augmented generation (RAG), vector search, Gemini
Cloud & Infra: Azure (AKS), Google Cloud, AWS, Supabase, Kubernetes, Docker, Terraform, Nginx
Data & Queues: PostgreSQL, pgvector, MySQL, Redis, Celery
Testing: Playwright, Vitest, Jest, pytest, PestPHP
Observability: New Relic, Datadog, Sentry
Professional Experience
Full-Stack Engineer → Team Lead → Senior Full-Stack Engineer (current)
Delivering full-stack products for client companies across Europe.
- Built secure, encryption-first features for products handling sensitive user data.
- Hardened applications against issues surfaced in independent security audits, closing authentication and session-handling gaps.
- Led delivery across 5+ client products in healthcare, sales, and assessment, owning architecture, code quality, and CI/CD.
- Optimized database performance for data-heavy products through indexing and query tuning.
- Modernized legacy client applications onto maintainable frameworks.
Selected Projects
Jarvis Asset — A production RAG platform that turns a fund's research archive into a conversational assistant. I build it across the stack: a microservices backend — hybrid retrieval (semantic + keyword search, reranked), automated document ingestion, encryption and hardened auth — and a mobile client. Go, Python, React Native, Supabase/pgvector, Gemini, GCP.
AssetPass — A digital-legacy platform where data is encrypted on the client and never readable by the server. I designed and built the encryption and secure-authentication layers. Next.js, Azure (AKS).
Asentaa SaaS Platform — A multi-tenant candidate-assessment SaaS platform; I rebuilt it from a legacy on-site tool, reworking the scoring engine and migrating existing data. Laravel, React, Tailwind CSS.
SalesGoal — A sales-management platform for pipeline tracking, performance analytics, and revenue forecasting. I built its drag-and-drop pipeline boards and data-visualization dashboards. Laravel, React, TypeScript, visx, Playwright.
KeyForCare Analytics — A patient-feedback and quality system for healthcare providers; I automated the report generation and distribution pipeline with caching and pre-computation. Vanilla PHP, Laravel, MySQL, Redis.
Open-Source Projects
A TypeScript toolchain in Zig
- ez — high-performance JS/TS parser + linter with a zero-copy ESLint plugin runner: run any ESLint plugin (core,
n,es-x,import) against the Zig AST without reimplementing a single rule. - ez-checker — a from-scratch reimplementation of the TypeScript type checker (the type-system core of
tsc) in Zig: full inference, control-flow narrowing, conditional/mapped/utility types. ~83% TypeScript-corpus conformance. - es-parser — the fast, standalone JS/TS/JSX parser the toolchain is built on; SIMD lexer, struct-of-arrays AST; 3,966/3,966 test262.
Static analysis & performance
Education
B.Eng. Computer Engineering — National University of Singapore