Skip to content
View CristhianKapelinski's full-sized avatar

Highlights

  • Pro

Block or report CristhianKapelinski

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Hi, I'm Cristhian Kapelinski 👋

LinkedIn GitHub Email Lattes Codeforces

Computer Science senior (GPA 9.19/10) · Python back-end engineer and applied AI/security researcher.

I build secure, high-throughput back-end systems and do applied AI and security research: data pipelines, LLM/SLM systems, and statistical modeling for Petrobras (with CeMEAI/USP), RNP, and ITA, plus current adversarial-AI security research at Poli-USP/LARC (Bradesco project). Author of 4 peer-reviewed papers (3 first-author, including BRACIS 2026, Springer LNAI), ICPC Silver Medalist, and winner of the SBRC 2026 Best Artifact Award.

Papers ICPC Award

🚀 What I'm up to

  • Pre-Master's Research Fellow @ USP (Poli-USP/LARC), AI Security: adversarial-AI / GenAI security in a Bradesco project, red team and blue team of LLMs (prompt injection, jailbreaks) and defenses (guardrails, input/output filters, detection).
  • R&D Fellow @ ITA (CYBERGUARD), CNPq (Apr–Jul 2026): distributed Go systems at scale (crawled 12M+ Docker Hub repos into an 84M-node Neo4j dependency graph, scanned 50k+ images into a 170M-finding public dataset) and privacy research on small language models (4-bit quantization, DP-SGD composed with HMAC pseudonymization across 96 LoRA adapters on a multi-GPU cluster).
  • Back-end Engineer @ Alice Humam (Petrobras, with CeMEAI/USP, 2025–2026): built the Python/FastAPI back-end of a reliability-analysis platform: ETL pipelines and survival-analysis models translated from research R code and verified numerically equivalent, plus the HTML reporting engine and a per-route observability layer (p50/p95/p99); over 16 months, 111k+ lines and 375 merged MRs, became the team code reviewer, and co-managed the dev team (Scrum/Kanban).
  • Competitive Programming: Silver Medal 🥈 at the 2025 ICPC Brazil Regional First Phase (team Array de Noobs 2.0).

🔬 Featured Work & Research

  • AnonShield: Scalable On-Premise Pseudonymization (First author · SBRC 2026 Best Artifact, all 4 reproducibility badges) High-throughput pseudonymization for CSIRT vulnerability data. GPU-accelerated NER, streaming I/O, and LRU caching cut processing of a 550 MB dataset from over 92 hours to under 10 minutes (738× faster), at 94.2% F1 and 96.4% recall, GDPR/LGPD-compliant without losing analytical utility.
  • Decomposing Memorization Reduction in Privacy-Preserving Fine-Tuning of SLMs (First author · BRACIS 2026, Springer) First empirical study of how DP-SGD and HMAC pseudonymization compose when fine-tuning 1 to 3B language models on CSIRT data, across 96 LoRA adapters and a dual extraction attack.
  • MulitaMiner: LLM-based Vulnerability Extraction (Co-author) LLM pipeline (DeepSeek, GPT-4) turning unstructured OpenVAS PDF reports into structured datasets: 96.18% recall and 93.55% F1 on a 6,700-vulnerability benchmark.

🛠️ Tech Stack

Languages

Python TypeScript JavaScript C++ C Go Bash PowerShell Dart SQL LaTeX

Back-end

FastAPI Celery Redis pytest

Data Science & ML

pandas NumPy SciPy scikit-learn XGBoost lifelines

AI · LLMs · NLP

PyTorch Hugging Face spaCy Tesseract OCR vLLM llama.cpp Opacus Ollama OpenAI Claude Gemini CUDA

Front-end & Mobile

React Next.js Svelte Flutter Node.js Vite npm Redux Jest Testing Library

Databases

MongoDB PostgreSQL SQLite Neo4j

DevOps & Observability

Docker Kubernetes GitHub Actions GitLab CI/CD Linux Nginx Caddy Traefik Git Prometheus Grafana

Security & Crypto

Wazuh OpenSSH HMAC-SHA256 Ed25519

Also hands-on with: Loki, Alertmanager, Grafana Alloy, Uptime Kuma, GraphSAGE, WeasyPrint, sentence-transformers (e5, bge-m3), BM25, BERTScore, Qwen-VL, PaddleOCR-VL, EMV/BR Code parsing, and AI-assisted development (Claude Code, OpenAI Codex, Gemini CLI).

🏆 Awards & Certifications

  • 🥇 Best Artifact Award, SBRC 2026 (best artifact of the entire conference) and Distinguished Artifact Reviewer, SBRC 2026
  • 🥈 Silver Medal, ICPC/SBC Programming Marathon 2025 (Brazil Regional First Phase); 3rd place RS, Phase Zero
  • 🏆 1st Place, SBRC 2026 Hackathon · 2nd Best Paper, WRSeg/ERRC 2025
  • 🎓 Hackers do Bem (144h, MCTI/SENAI/RNP) · ICT Residency in AI & Data Science (180h, BRISA/Softex) · CS50P (Harvard)

📫 Let's connect: LinkedIn · Lattes · Codeforces · Email

Pinned Loading

  1. AnonShield/anonshield AnonShield/anonshield Public

    Scalable on-premise pseudonymization for CSIRT network vulnerability data: deterministic HMAC-SHA256 pseudonyms, NER and regex detection, tesseract OCR, CLI and web app. SBRC 2026 Best Artifact.

    Python 3

  2. ChimangoScan/DITector ChimangoScan/DITector Public

    Large-scale measurement framework for the Docker ecosystem, extending the Dr. Docker (WWW '25) methodology. Implements distributed data collection, IDEA dependency graph construction, and supply-ch…

    Go 2

  3. AnonShield/MulitaMiner AnonShield/MulitaMiner Public

    MulitaMiner: a tool developed to extract and process vulnerabilities from security PDF reports using Large Language Models (LLMs).

    Python 4

  4. AnonShield/LabVulnerabilities AnonShield/LabVulnerabilities Public

    Comprehensive containerized security lab with 158+ vulnerable services (OWASP, CVEs, Databases, DevOps). Features an isolated network, unified orchestration, and a production-grade automated OpenVA…

    Python 2