Muji Dipto

Senior Software Engineer | AI Native Product Engineering

  • Senior Software Engineer @ OnEarly
  • Brisbane, QLD
  • Not looking, happy to connect
Nov 2026 – present
OnEarly
Senior Software Engineer
Jan 2022 – Oct 2026
Oracle
Security Analyst → Software Engineer → Senior Software Engineer

Highlights

  • 15,000 software packages risk-scored daily, on a platform I own end to end open sca-scoring
  • 77% cut in security data refresh pipeline runtime, from 2 hours to 28 minutes open sca-scoring
  • 960+ analyst-hours saved by a curation system I built from scratch open vuln-curation

Experience

Nov 2026 – Present

Senior Software Engineer, OnEarly

Oct 2025 – Oct 2026

Senior Software Engineer, Oracle (Brisbane, QLD)

  • Own the software composition analysis (SCA) service and the risk-scoring platform covering 15,000 software packages, leading backend development, OCI deployment and production operations.
  • Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.
  • Improved Java/Maven scan reliability in an enterprise scanning platform on OCI and Kubernetes (OKE), with queue-based orchestration and event-driven result processing.
  • Designed, built and deployed an Oracle APEX document approvals application within one week using AI-assisted development.

Aug 2022 – Oct 2025

Software Engineer, Oracle (Brisbane, QLD)

  • Led the design and Java/Micronaut development of the SCA Scoring service.
  • Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
  • Built a CLI tool for analysts to generate software bills of materials (SBOMs) and score software packages in optimised batches.
  • Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.
  • Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.

Jan 2022 – Jul 2022

Security Analyst, Oracle (Brisbane, QLD)

  • Designed a common schema for NVD and OSV vulnerability data that became the standard for subsequent source integrations.
  • Built Python dependency-analysis and ingestion pipelines for Go and Objective-C, automating SBOM processing and handling ecosystem-specific formats and edge cases.

Feb 2020 – Jan 2022

Casual Tutor, Web Design and Development, The University of Queensland (Brisbane, QLD)

  • Taught approximately 90 students per semester across HTML, CSS, JavaScript, prototyping and user-centred design, with strong evaluations for clarity and approachability.

Projects

SCA risk-scoring platform

Oracle, Aug 2022 to Oct 2026

15,000 packages risk-scored daily; data refresh cut by 77%, 2 hours to 28 minutes

  • Led end-to-end delivery of a risk-scoring service assessing 15,000 software packages daily.
  • Led the design and Java/Micronaut development of the SCA Scoring service.
  • Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
  • Cut data-refresh time by 77%, from 2 hours to 28 minutes, through query optimisation and smarter caching.
  • Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.

stack: Java, Micronaut, Python, Apache Airflow, OCI

CocoaPods vulnerability curation

Oracle, Senior Software Engineer

960+ analyst-hours saved; a 4,500-report backlog cut by 73%

  • Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.

stack: Python

World Cup Newsletter Platform

Personal project, deployed

Deployed: personalised newsletters from live APIs and the Gemini LLM API

  • Built and deployed a Java and Python platform that ingests data from multiple live APIs and uses the Gemini LLM API to generate personalised newsletters.
  • Implemented bounded worker pools, prioritised scheduling, fan-out and retry handling to coordinate concurrent requests across rate-limited APIs and the LLM provider.

stack: Java, Python, Gemini LLM API

repo: github.com/MujiDipto/fifa-wc-newsletter (opens in a new tab)

SAST findings dashboard

Oracle, Software Engineer

Designed and prototyped a SAST findings dashboard to WCAG and Oracle standards

  • Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.

stack: Figma, React, Oracle JET

Skills

Languages
Java, Python, SQL, JavaScript, TypeScript
Backend
Micronaut, REST API design, microservices, concurrency, asynchronous processing
Data
Apache Airflow, ETL pipelines, data modelling, MySQL, Oracle Database
Cloud & delivery
OCI, OCI Functions, Docker, Maven, CI/CD, Git
Testing
JUnit, integration testing, performance testing
Security
SCA, SAST, SBOMs, vulnerability analysis
Practices
Agile/Scrum, requirements analysis, technical design, code reviews, AI-assisted development

Education

Bachelor of Engineering (Honours), Software Engineering

The University of Queensland, Feb 2018 – Nov 2021

Honours thesis with Oracle: automated IoT firmware vulnerability detection through open-source dependency analysis and vulnerability database lookups.

High Distinctions in Advanced Cybersecurity, Cybersecurity, Data Visualisation and Statistics; Distinction in Machine Learning.

Contact

I build the platforms other teams rely on without having to think about them.

I've just joined OnEarly, so I'm not looking for a new role. I'm always happy to talk about backend platforms, data pipelines and software supply-chain security. Email is the quickest way to reach me.