Forging reliable structures.

Each line, laid like stone.

Work worth signing.

Devotion to craft.

Tempered to endure time and use.

Jon Gill —

Systems, Forged with Devotion

About

Software Developer

Software developer based in The Woodlands, TX, with a BS in Computer Science (Summa Cum Laude, 3.90 GPA) from UAT. My path here wasn't traditional — six years as a state law enforcement investigator (including federal deputization with DEA and USPIS) and two years in IT support shaped how I approach problem-solving: methodically, evidence-first, with an eye for what breaks under pressure.

I build with Python, PHP, JavaScript, SQL, and C++, working across web development, database engineering, and security-first system design. My projects implement defense-in-depth architecture — bcrypt password hashing, session hardening, prepared statements, CSRF protection, and STRIDE threat modeling — aligned to OWASP Top 10 mitigations.

I believe code should be resilient, defensive, and honest — the same standards I applied to investigations. Every function should answer for what it does, why it exists, and what happens when it fails.

Currently seeking entry-level software development roles with a path toward application security or DevSecOps engineering. Open to hybrid and onsite roles in the Houston metropolitan area.

Skills

Tools and languages forged over years of practice:

Python 3+ years PHP 1 year JavaScript 2 years SQL/MySQL 1 year C++ 2+ years HTML/CSS 5+ years Linux 4+ years Git 4+ years

Projects

PictureScanner

Complete

PHP/MySQL web application implementing defense-in-depth authentication security. Features bcrypt + SHA512 password hashing, session fixation prevention, HTTP-only session cookies, brute-force rate limiting, parameterized SQL queries, and CSRF token validation. Aligned to OWASP Top 10 mitigation categories. Includes STRIDE threat model documenting identified threats and mitigations.

PHP SQL Security OWASP
↗

Sun Shadow Compass

In Development

Client-side progressive web app for solar shadow direction calculation, designed for EVA navigation training. Zero backend architecture eliminates server-side attack surface — no database, no API endpoints, no data transmission. Implements privacy-conscious geolocation API handling with manual-entry alternative. Solar position engine (NREL SPA) vendored with full license attribution rather than pulled from npm at runtime. Works fully offline as an installable PWA.

JavaScript TypeScript Svelte PWA Privacy-Conscious
↗

Warehouse Sorting System

In Development

PLC ladder logic capstone demonstrating safety interlock design and audit logging principles. Seal-in circuit patterns enforce fail-safe operation (system defaults to safe state). FIFO/LIFO buffer implementation serves as operational audit trail. These industrial safety patterns map directly to software security: default-deny access control, circuit breaker patterns, and immutable event logging.

PLC Ladder Logic Industrial Automation Automation Safety
↗

Currently Learning

Actively building application security skills alongside software development:

→ OWASP Top 10 — deep study of each vulnerability category and mitigation

→ PortSwigger Web Security Academy — hands-on exploitation labs (190+ exercises)

→ STRIDE Threat Modeling — structured security analysis methodology

→ OWASP Secure Coding Practices — developer-focused security checklist

Next certification target: CompTIA Security+ (SY0-701)

Contact

Available for software development roles with a security focus. Houston metropolitan area, open to hybrid/onsite.

Email Me GitHub Profile LinkedIn