Dylan Henderson

Senior Software Engineer

0426007021

dylanthenderson@yahoo.com.au

Relocating to Canberra, ACT

(Optimised for Cowra regional position)

For filename optimization

AI-Powered CV Optimisation
ATS Keyword Optimizer

Professional Summary

Senior Software Engineer with active NV1 clearance. Government exposure through federal project delivery at Leidos Australia. Expertise in modern development frameworks (React, Node.js, TypeScript) with strong focus on security implementation. Experienced in OAuth 2.0/OIDC authentication flows, AES-256 encryption, RBAC systems, and automated security scanning. Available for immediate start in Canberra.

Work Experience

Senior Software Engineer

Bonza Clean

09/2024 - Present

Melbourne, VIC

  • Architected and implemented end-to-end security architecture including AES-256 encryption at rest, TLS 1.3 in transit, and automated key rotation

  • Developed secure customer portal with role-based access control (RBAC), comprehensive audit logging, and OWASP Top 10 compliance

  • Established GitOps CI/CD pipeline with SAST/DAST integration, container vulnerability scanning, and automated dependency checks

  • Built RESTful APIs implementing OAuth 2.0 authorisation code flow with PKCE, JWT token lifecycle management, and rate limiting

  • Integrated PCI-DSS compliant payment processing with tokenisation, secure vault storage, and transaction monitoring

  • Developed AI automation features using OpenAI GPT-4 API with prompt injection protection and PII filtering mechanisms

  • Created comprehensive technical documentation including OpenAPI 3.0 specifications, security runbooks, and incident response procedures

  • Managed security incident response when credentials were compromised, investigated breach using AI tools, implemented access controls, and documented findings

  • Proactively monitored security advisories and patched critical vulnerabilities including Next.js security updates

  • Implemented event-driven workflow automation using n8n with webhook security, HMAC validation, and idempotency controls

  • Applied SOLID principles and clean code practices, established coding standards with ESLint/Prettier, and automated quality checks

  • Led technical initiatives including developer recruitment, structured code review processes, and knowledge transfer sessions

Independent Developer

Side Projects

2018 - Present

Melbourne, VIC

  • E-commerce Platform: Co-developed secure e-commerce platform handling product catalogue and payment transactions

  • Headless WordPress: Built secure e-commerce solutions with Next.js frontend and WordPress REST API architecture

  • Portfolio Sites: Developed portfolio and e-commerce sites with third-party API integrations maintaining security standards

Full Stack Engineer

Reebelo

03/2024 - 09/2024

Collingwood, VIC

  • Developed features for e-commerce platform tightly integrated with Shopify APIs handling product sync and order management

  • Contributed to decoupling monolithic architecture into microservices to reduce Shopify API dependencies and improve performance

  • Enhanced financial dashboard features including revenue tracking, refund processing, and payment reconciliation

  • Worked on inventory management system including stock levels, buybox algorithms, and automated reordering logic

  • Implemented comprehensive test coverage with Jest ensuring reliability of financial calculations and API integrations

  • Followed Agile/Scrum methodology with sprint planning, daily standups, and retrospectives for continuous improvement

Full Stack Developer

etika

03/2022 - 03/2024

Melbourne, VIC

  • Developed 10+ TypeScript/Koa microservices with federated UI architecture for lending platform

  • Built document generation service using React-based PDF generation for contracts and statements with S3 storage and versioning

  • Implemented PII data masking and GDPR compliance features including right to be forgotten, data retention policies, and consent management

  • Contributed to lending workflows including application processing, financial calculations, and third-party integration features

  • Created OpenAPI 3.0 documentation for all microservices ensuring clear API contracts and integration guidelines

  • Maintained extensive logging and monitoring across microservices with canary deployment support for safe releases

  • Applied TDD methodology achieving high test coverage across all services with comprehensive unit and integration tests

  • Onboarded new developers as technical buddy, created documentation, and conducted regular code reviews throughout 2-year tenure

Software Engineer (NV1 Cleared)

Leidos Australia

09/2021 - 03/2022

Melbourne, VIC

  • Delivered secure microservice components for federal government data platform with active NV1 clearance

  • Developed Java/Spring Boot REST APIs implementing Defence security controls and audit requirements

  • Applied Agile SDLC with formal change management, peer code reviews, and security gate reviews

  • Followed strict coding standards, maintained comprehensive unit tests, and participated in architectural design reviews

  • Collaborated in classified environment using air-gapped development systems and secure communication protocols

Software Developer

Virtech

02/2020 - 09/2021

Melbourne, VIC

  • Monitored enterprise client systems across government and legal sectors using Nexthink platform

  • Tracked system performance, application crashes, BSOD incidents, and resource utilisation across thousands of endpoints

  • Created PowerShell automation scripts for incident remediation and data collection, reducing manual intervention

  • Built internal company website using Vue.js with component-based architecture and responsive design

  • Achieved Nexthink Master's Level Certification, becoming platform SME and training team members

  • Analysed performance trends and provided actionable insights to improve system stability for enterprise clients

  • Maintained version control with Git, participated in code reviews, and followed established development workflows

Developer

Direct Speech

07/2019 - 02/2020

Melbourne, VIC

  • Built secure web applications using CakePHP framework with focus on data integrity

  • Designed database schemas with focus on security and data integrity

  • Implemented secure RESTful APIs for system integration

  • Applied industry coding standards and best practices for maintainable solutions

Education

Monash University

Information Technology (Computers, Networks and Security) | Completed: 02/2020

Technical Skills

CMS & Web Development
Languages & Frameworks

Languages: PHP, JavaScript/ES6+, TypeScript, Java (Spring Boot), HTML5, CSS3, SQL

Frontend: React with Redux/Context API, Vue.js with Vuex, Next.js SSR/SSG, React Native, Material-UI, Tailwind CSS

Testing: PHPUnit, Jest with coverage reports, React Testing Library, Cypress E2E, SAST/DAST integration

Code Quality: ESLint, Prettier, SonarQube, PHPStan, pre-commit hooks, automated code analysis, coding standards enforcement

Infrastructure & DevOps

Databases: MySQL query optimisation, PostgreSQL indexing strategies, MongoDB document modeling, Redis caching patterns

Cloud/DevOps: AWS services (EC2, Lambda, S3, RDS, CloudWatch), Docker multi-stage builds, GitHub Actions, GitLab CI/CD, CDN configuration

Testing: PHPUnit, Jest with coverage reports, React Testing Library, Cypress E2E, SAST/DAST integration

Development Practices: Git flow, feature branching, pull request workflows, code review processes, pair programming

Professional Experience

Security Clearance: AGSVA NV1 - Active (previously held 2021-2022 with Leidos Australia)

Frontend: React with Redux/Context API, Vue.js with Vuex, Next.js SSR/SSG, React Native, Material-UI, Tailwind CSS

Backend: Node.js, Express.js middleware patterns, NestJS dependency injection, Spring Boot microservices, RESTful API design

API Security: Rate limiting, API key management, request validation, HMAC signatures, IP whitelisting, DDoS protection

API Design: RESTful principles, OpenAPI 3.0 specifications, JSON Schema validation, webhook implementations, versioning strategies