Piotr Karwasz
Security Team Member at The Apache Software Foundation
Gdynia, Pomeranian Voivodeship, Poland
Summary
🤩
Rockstar🎓
Top SchoolPiotr Karwasz is a backend-focused Java engineer and security advocate with six years of professional experience and a deep academic background in mathematics. He contributes to critical open-source infrastructure—most notably Log4j—where he has fixed vulnerabilities, improved the 1.x bridge, and expanded test coverage, and now serves in multiple leadership roles at The Apache Software Foundation including VP ECMA Relations and Security Team Member. Piotr specializes in Java/Jakarta EE and Spring Boot, and brings complementary skills in C++, CI/CD, and GNU/Linux administration, plus 17 years of university teaching experience that sharpen his ability to explain complex technical issues. Actively engaged in software transparency initiatives like CycloneDX and TC-54, he helps drive SBOM and VEX adoption in the Java ecosystem. Available for open-source contract work, he balances practical engineering with standards advocacy from his base in Gdynia, Poland.
6 years of coding experience
11 years of employment as a software developer
Ecole normale supérieureDoctorat Mathématiques, Doctorat Mathématiques at Université Henri Poincaré, Nancy 1
Polish, Italian, French, German, English
Stackoverflow
14,548reputation
870kreached
660answers
1question
java
top-1%
logging
top-5%
spring
top-5%
maven
top-5%
log4j
top-1%
tomcat
top-1%
Github Skills (24)
debugging10
debug10
testing10
java10
servlet10
tomcat10
javas10
log4j10
spring-boot10
reflection9
jakartaee9
unit-testing9
spring9
reflect9
slf4j9
Programming languages (18)
Github contributions (5)
apache/logging-log4j2
Jan 2022 - Jan 2023
Apache Log4j is a versatile, feature-rich, efficient logging API and backend for Java.
Role in this project:
Back-end Developer & Test Automation Engineer
Back-end Developer & Test Automation EngineerContributions:8 releases, 932 reviews, 320 commits in 1 year
Contributions summary:Piotr's contributions centered around bug fixes and enhancements in the Log4j 1.x bridge, which included resolving class casting exceptions, handling multiple filters, and addressing vulnerabilities. They implemented solutions related to system property handling, including fixing string index out-of-bounds exceptions, adding support for missing properties, and improving default values. The user also worked on enhancing test coverage, adding and expanding the testing of various features.
problemslog4j2structured-loggingloggingasync
apache/logging-log4j-transform
Jan 2023 - Mar 2025
Tools for binary post-processing of projects using Apache Log4j.
Contributions:1 release, 5 reviews, 25 PRs in 2 years 2 months
log4jlog4j2apacheloggingjava
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.