Santosh User

I’m a DevSecOps aspirant and backend infrastructure engineer focused on building secure, production-ready services with strong operational discipline. I combine Go backend engineering with offensive security practice to understand both how systems should be defended and how they fail.

In my Ride App project, I designed and deployed 3 isolated Docker containers (PostgreSQL, Redis, MQTT) on a private container network and verified services running in production. I also structured a clean domain package layout, configured Air live-reload for clean startup, and implemented migration/forward-rollback schema evolution with code-level RBAC (Admin / Manager / Employee).

Beyond microservices, I built a zero-dependency Python CLI database management system using flat-file persistence and three-tier RBAC—enforcing authorization checks before every ledger operation. I enjoy keeping the attack surface minimal and the interfaces predictable by avoiding unnecessary frameworks and dependencies.

My background also includes network and IoT work: I simulated a 10-node enterprise topology with VLANs, DHCP, and VoIP using CCNA 200-301 material, and I wrote Arduino firmware for MQ-2 gas leak detection with embedded C and threshold-based alert logic to reduce false positives. I’m now pushing HTB Academy offensive modules while expanding Go backend patterns like auth middleware, rate limiting, and API gateway structure.