Building production-minded software across security, quantitative systems, and the web.
I build systems that turn complex technical problems into clear, testable workflows. My current work spans reachability-aware vulnerability triage, market microstructure, quantitative decision support, and interactive web experiences.
Across projects, I care about explicit assumptions, reproducible demos, strong testing, and knowing when to override an AI-generated first pass.
| Project | Description | Stack |
|---|---|---|
| Vulnerability Triage Agent | Reachability-aware CVE prioritizer that combines structural static analysis, OSV advisories, graph traversal, and structured Claude tool use. | Rust Python TypeScript tree-sitter OSV |
| Trading Microstructure Engine | Tick-by-tick futures engine for order-flow imbalance, metric storage, and API access, with backtesting and behavioral-analysis layers in development. | Rust Python FastAPI SQLite |
| EDGE Predict Model | Quantitative sports decision-support platform for calibrated probabilities, no-vig odds, expected value, fractional Kelly, and auditable picks. | Python FastAPI PostgreSQL Next.js |
| santiagorivera.com | Bilingual personal portfolio with an editorial interface, motion system, and a restrained WebGL visual layer. | Next.js TypeScript GSAP R3F |
- Build an end-to-end vertical slice before expanding scope.
- Keep calculations deterministic, testable, and separate from LLM-generated explanations.
- Document tradeoffs, rejected designs, and the reasoning behind architectural decisions.
- Treat AI as an engineering collaborator whose output still requires verification and judgment.
Rust · Python · TypeScript · PostgreSQL · FastAPI · Next.js · GitHub Actions · tree-sitter
Open to conversations about software engineering, applied AI, security tooling, and data-intensive systems.