Antoniy Nikolaev
Astana, Astana, Kazakhstan
Summary
🤩
Rockstar🎓
Top SchoolAntoniy Nikolaev is a software engineer with 9 years of experience specializing in end-to-end development of web security products, from research and prototyping to production-grade deployments. He has driven design and implementation of sophisticated API abuse prevention, bot detection, and ATO protection systems, combining statistical, ML, and behavior-profiling techniques to minimize false positives under high load. Comfortable in Python-led stacks (FastAPI, Celery, ClickHouse, Redis, PostgreSQL) with hands-on Go and TypeScript work, he focuses on observable, interpretable detection pipelines with strong test and performance coverage. An active researcher and speaker, Antoniy has published findings, disclosed CVEs, and presented at major security conferences like Black Hat Asia and PHDays. He is also an open-source contributor—enhancing the notable gotestwaf project with improved reporting, WebSocket checks, and UX-focused PDF/charting features—showing attention to both detection logic and developer experience. Based in Astana, Kazakhstan, he combines practical product craftsmanship with a research mindset that surfaces subtle attack patterns and defenses others overlook.
9 years of coding experience
8 years of employment as a software developer
Specialist Computer Security, Specialist Computer Security at Tomsk State University
English, Russian
Github Skills (17)
waf10
security10
security-testing10
go10
api-security10
websocket9
pdf-generation9
websockets-client9
client-websocket9
websocket-client9
rest-api8
api-rest8
restful-api8
api-design8
bug-tracker7
Programming languages (10)
Github contributions (5)
wallarm/gotestwaf
Feb 2021 - Aug 2021
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:29 reviews, 14 commits, 15 PRs in 6 months
Contributions summary:Antoniy primarily contributed to enhancing the functionality and reporting capabilities of the Go-based API security assessment tool. Their work involved fixing false-positive results by inverting scores, updating the save path for reports, and adding support for WebSocket pre-checks. The user also focused on improving the user interface, including the addition of charts and enhancements to the PDF report generation. These improvements demonstrate a focus on both core functionality and user-friendly presentation of results.
golangweb-application-securityapisecurity-toolsgrpc-security
osint-dev-team/osint-framework
Jul 2020 - Jun 2021
:fork_and_knife: All-in-one OSINT-RECON Swiss Knife
Contributions:5 releases, 6 reviews, 29 commits in 11 months
all-in-oneknifeshodanreconpython3
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.