Nov 2026 – Present
Muji Dipto
Senior Software Engineer | AI Native Product Engineering
- Senior Software Engineer @ OnEarly
- Brisbane, QLD
- Not looking, happy to connect
- Nov 2026 – present
- OnEarly
- Senior Software Engineer
- Jan 2022 – Oct 2026
- Oracle
- Security Analyst → Software Engineer → Senior Software Engineer
Highlights
- 15,000 software packages risk-scored daily, on a platform I own end to end open sca-scoring
- 77% cut in security data refresh pipeline runtime, from 2 hours to 28 minutes open sca-scoring
- 960+ analyst-hours saved by a curation system I built from scratch open vuln-curation
Experience
Oct 2025 – Oct 2026
Senior Software Engineer, Oracle (Brisbane, QLD)
- Own the software composition analysis (SCA) service and the risk-scoring platform covering 15,000 software packages, leading backend development, OCI deployment and production operations.
- Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.
- Improved Java/Maven scan reliability in an enterprise scanning platform on OCI and Kubernetes (OKE), with queue-based orchestration and event-driven result processing.
- Designed, built and deployed an Oracle APEX document approvals application within one week using AI-assisted development.
Aug 2022 – Oct 2025
Software Engineer, Oracle (Brisbane, QLD)
- Led the design and Java/Micronaut development of the SCA Scoring service.
- Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
- Built a CLI tool for analysts to generate software bills of materials (SBOMs) and score software packages in optimised batches.
- Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.
- Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.
Jan 2022 – Jul 2022
Security Analyst, Oracle (Brisbane, QLD)
- Designed a common schema for NVD and OSV vulnerability data that became the standard for subsequent source integrations.
- Built Python dependency-analysis and ingestion pipelines for Go and Objective-C, automating SBOM processing and handling ecosystem-specific formats and edge cases.
Feb 2020 – Jan 2022
Casual Tutor, Web Design and Development, The University of Queensland (Brisbane, QLD)
- Taught approximately 90 students per semester across HTML, CSS, JavaScript, prototyping and user-centred design, with strong evaluations for clarity and approachability.
Projects
SCA risk-scoring platform
Oracle, Aug 2022 to Oct 2026
15,000 packages risk-scored daily; data refresh cut by 77%, 2 hours to 28 minutes
- Led end-to-end delivery of a risk-scoring service assessing 15,000 software packages daily.
- Led the design and Java/Micronaut development of the SCA Scoring service.
- Redesigned REST API response schemas and caching to improve throughput and reliability in SCA Scoring.
- Cut data-refresh time by 77%, from 2 hours to 28 minutes, through query optimisation and smarter caching.
- Developed Python ingestion pipelines using Apache Airflow, with concurrency controls, exponential backoff and rate-limit handling to keep scoring data current.
stack: Java, Micronaut, Python, Apache Airflow, OCI
CocoaPods vulnerability curation
Oracle, Senior Software Engineer
960+ analyst-hours saved; a 4,500-report backlog cut by 73%
- Built a rule-based CocoaPods vulnerability-report curation system from scratch in Python, reducing a 4,500-report backlog by 73% and saving 960+ analyst-hours.
stack: Python
World Cup Newsletter Platform
Personal project, deployed
Deployed: personalised newsletters from live APIs and the Gemini LLM API
- Built and deployed a Java and Python platform that ingests data from multiple live APIs and uses the Gemini LLM API to generate personalised newsletters.
- Implemented bounded worker pools, prioritised scheduling, fan-out and retry handling to coordinate concurrent requests across rate-limited APIs and the LLM provider.
stack: Java, Python, Gemini LLM API
repo: github.com/MujiDipto/fifa-wc-newsletter (opens in a new tab)
SAST findings dashboard
Oracle, Software Engineer
Designed and prototyped a SAST findings dashboard to WCAG and Oracle standards
- Led development of a SAST findings dashboard; created Figma designs and React/Oracle JET prototypes following WCAG and Oracle design standards.
stack: Figma, React, Oracle JET
Skills
- Languages
- Java, Python, SQL, JavaScript, TypeScript
- Backend
- Micronaut, REST API design, microservices, concurrency, asynchronous processing
- Data
- Apache Airflow, ETL pipelines, data modelling, MySQL, Oracle Database
- Cloud & delivery
- OCI, OCI Functions, Docker, Maven, CI/CD, Git
- Testing
- JUnit, integration testing, performance testing
- Security
- SCA, SAST, SBOMs, vulnerability analysis
- Practices
- Agile/Scrum, requirements analysis, technical design, code reviews, AI-assisted development
Education
Bachelor of Engineering (Honours), Software Engineering
The University of Queensland, Feb 2018 – Nov 2021
Honours thesis with Oracle: automated IoT firmware vulnerability detection through open-source dependency analysis and vulnerability database lookups.
High Distinctions in Advanced Cybersecurity, Cybersecurity, Data Visualisation and Statistics; Distinction in Machine Learning.
Contact
I build the platforms other teams rely on without having to think about them.
I've just joined OnEarly, so I'm not looking for a new role. I'm always happy to talk about backend platforms, data pipelines and software supply-chain security. Email is the quickest way to reach me.
- résumé
- résumé (PDF)