whoami

Muji Dipto

Senior Software Engineer | AI Native Product Engineering

Senior Software Engineer @ OnEarly
Brisbane, QLD
Not looking, happy to connect

Nov 2026 – present
OnEarly: Senior Software Engineer; Jan 2022 – Oct 2026
Oracle: Security Analyst → Software Engineer → Senior Software Engineer

cat highlights.md

15,000 software packages risk-scored daily, on a platform I own end to end
77% cut in security data refresh pipeline runtime, from 2 hours to 28 minutes
960+ analyst-hours saved by a curation system I built from scratch

git log

Nov 2026 – Present

Senior Software Engineer, OnEarly

Oct 2025 – Oct 2026

Senior Software Engineer, Oracle (Brisbane, QLD)

Own the software composition analysis (SCA) service and the risk-scoring platform covering 15,000 software packages, leading backend development, OCI deployment and production operations.
Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.
Improved Java/Maven scan reliability in an enterprise scanning platform on OCI and Kubernetes (OKE), with queue-based orchestration and event-driven result processing.
Designed, built and deployed an Oracle APEX document approvals application within one week using AI-assisted development.

Aug 2022 – Oct 2025

Software Engineer, Oracle (Brisbane, QLD)

Led the design and Java/Micronaut development of the SCA Scoring service.
Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
Built a CLI tool for analysts to generate software bills of materials (SBOMs) and score software packages in optimised batches.
Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.
Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.

Jan 2022 – Jul 2022

Security Analyst, Oracle (Brisbane, QLD)

Designed a common schema for NVD and OSV vulnerability data that became the standard for subsequent source integrations.
Built Python dependency-analysis and ingestion pipelines for Go and Objective-C, automating SBOM processing and handling ecosystem-specific formats and edge cases.

Feb 2020 – Jan 2022

Casual Tutor, Web Design and Development, The University of Queensland (Brisbane, QLD)

Taught approximately 90 students per semester across HTML, CSS, JavaScript, prototyping and user-centred design, with strong evaluations for clarity and approachability.

git log --graph

Nov 2026(HEAD -> main) joined OnEarly as Senior Software Engineer
Oct 2025promoted to Senior Software Engineer, Oracle
Aug 2022became Software Engineer, Oracle
Jan 2022merge: joined Oracle as Security Analyst
|\
Feb 2020tutor: Web Design and Development, UQ
2021graduated: Bachelor of Engineering (Honours), Software Engineering
|/
2018started: Bachelor of Engineering (Honours), Software Engineering, UQ

ls projects/

sca-scoring/
vuln-curation/
world-cup-newsletter/
sast-dashboard/

open sca-scoring

SCA risk-scoring platform

Oracle, Aug 2022 to Oct 2026

Led end-to-end delivery of a risk-scoring service assessing 15,000 software packages daily.
Led the design and Java/Micronaut development of the SCA Scoring service.
Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
Cut data-refresh time by 77%, from 2 hours to 28 minutes, through query optimisation and smarter caching.
Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.

stack: Java, Micronaut, Python, Apache Airflow, OCI

open vuln-curation

CocoaPods vulnerability curation

Oracle, Senior Software Engineer

Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.

stack: Python

open sast-dashboard

SAST findings dashboard

Oracle, Software Engineer

Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.

stack: Figma, React, Oracle JET

cat skills.txt

Languages: Java, Python, SQL, JavaScript, TypeScript
Backend: Micronaut, REST API design, microservices, concurrency, asynchronous processing
Data: Apache Airflow, ETL pipelines, data modelling, MySQL, Oracle Database
Cloud & delivery: OCI, OCI Functions, Docker, Maven, CI/CD, Git
Testing: JUnit, integration testing, performance testing
Security: SCA, SAST, SBOMs, vulnerability analysis
Practices: Agile/Scrum, requirements analysis, technical design, code reviews, AI-assisted development

cat education.md

Bachelor of Engineering (Honours), Software Engineering

The University of Queensland, 2018 – 2021

Honours thesis with Oracle: automated IoT firmware vulnerability detection through open-source dependency analysis and vulnerability database lookups.

High Distinctions in Advanced Cybersecurity, Cybersecurity, Data Visualisation and Statistics; Distinction in Machine Learning.

cat contact

I build the platforms other teams rely on without having to think about them.

I've just joined OnEarly, so I'm not looking for a new role. I'm always happy to talk about backend platforms, data pipelines and software supply-chain security. Email is the quickest way to reach me.

email: mujibulislamdipto@gmail.com
linkedin: linkedin.com/in/mujidipto
github: github.com/MujiDipto
résumé: résumé (PDF)

Muji Dipto

Highlights