Skip to content
Open to work

Hi, I'm

Bartłomiej Noworyta

Fullstack Developer · Web & Security

Web/full-stack with an infrastructure and security background. Java/Spring, React/Next.js and Python/FastAPI - web apps and REST APIs, on Azure, in Docker, built with OWASP and WCAG in mind.

Bartłomiej Noworyta

About

Fullstack Developer with 3+ years of commercial IT experience - from ERP rollouts and server administration, through QA, to building production web applications. I currently work as a developer at the Auschwitz-Birkenau State Museum (accessibility audits and security testing of web applications). I build web apps and REST APIs and work with the cloud, containers and relational databases - the full tech stack is listed below. The infrastructure and cybersecurity background (a Master's degree in progress, hands-on SIEM and hardening) isn't a separate track for me - it's how I approach writing applications. I'm fluent with AI tools (incl. Claude Code, Codex) for building apps, bots and automations - from planning and documentation, through code, to deployment. I've conducted two digital accessibility audits (WCAG 2.2 AA); I also build WordPress/WooCommerce sites and shops.

Skills

Web/full-stack with an infrastructure and security background - the stack I actually use

Frontend

  • React
  • Next.js
  • TypeScript
  • JavaScript
  • Redux
  • Tailwind CSS
  • Angular

Backend

  • Java
  • Spring Boot
  • Python
  • FastAPI
  • Node.js
  • REST API
  • Go

Databases

  • PostgreSQL
  • MySQL/MariaDB
  • SQL Server
  • Firebird
  • MongoDB

Cloud & DevOps

  • Microsoft Azure
  • Docker
  • CI/CD
  • Git
  • Linux
  • Windows Server
  • Proxmox
  • Vercel

Security & accessibility

  • OWASP / ASVS
  • IAM / OAuth2 / OIDC
  • Hardening
  • SIEM (Wazuh, ELK)
  • Incident response
  • Wireshark
  • WCAG 2.2 AA
  • Accessibility audits

AI, tooling & automation

  • Claude Code
  • Codex
  • Bash
  • PowerShell
  • KQL
  • Postman
  • Jira / ClickUp

WordPress & E-commerce

  • WordPress
  • Kadence Pro
  • Greenshift
  • WooCommerce

Projects

Selected apps and deployments

Fikołki

Production
FeaturedTeam project

A commercial SaaS running in production for a children's play-centre business: a customer web app and an admin panel. Also available as a mobile app (iOS/Android).

  • Online payments (PayU) and notifications (Firebase)
  • Multi-language, bookings, tickets & passes, shop
  • FastAPI
  • PostgreSQL
  • Firebase
  • React
  • Mantine
  • PayU
  • Docker

Visitor Service Center (Auschwitz-Birkenau Museum)

Production
Featured

A bilingual WordPress site (~50 pages) for the Visitor Service Center of the Auschwitz-Birkenau State Museum.

  • Full PL/EN version (Polylang): history of KL Auschwitz I, II-Birkenau, III-Monowitz and the Shoah, a 1939-1945 timeline, collections, archive, camp art, library, collections sharing, directions.
  • A former-prisoner inquiry form (PL/EN) stored in a database with SMTP delivery; QR codes to museum resources.
  • WordPress
  • Kadence
  • Kadence Blocks Pro
  • Polylang
  • WP Mail SMTP
  • WPvivid

Angelusy

Production
Featured

Online voting for the “Angelusy 2026” contest (Słomniki municipality): multiple categories, live ranking, admin panel.

  • Sign-up/sign-in, one vote per category, scoring and ranking
  • Admin panel: categories, candidates, stats, users
  • Next.js
  • TypeScript
  • Drizzle ORM
  • PostgreSQL (Neon)
  • JWT
  • Tailwind CSS

KucharKi.org

Live
Featured

A cooking platform built on user-generated content, live on its own domain: recipes added, rated and commented on by users, moderation, badges, a meal planner. Next.js 16, with SEO as the primary goal.

  • In production at kucharki.org (Vercel + Cloudflare): 79 recipes, guides, SSR/SSG and JSON-LD structured data.
  • Drizzle ORM + PostgreSQL (Supabase, migrated from Neon with no data loss), typo-tolerant FTS + pg_trgm, daily backups.
  • Next.js
  • TypeScript
  • Drizzle ORM
  • PostgreSQL (Supabase)
  • Auth.js
  • Cloudflare R2
  • Sentry

MICHA

Ready
Featured

A meal ordering and billing system for hospitals, schools, offices and companies: menus, sign-ups with cut-off times, monthly billing and serving lists. A single Go binary serves both the API and the embedded React UI.

  • A modular monolith in Go: sqlc + PostgreSQL, goose, Domain Events; a single binary (Windows Service / Linux) or Docker.
  • Security and GDPR: JWT + refresh, argon2id, per-permission RBAC, audit log, rate limiting, CSRF, data erasure, retention.
  • Go
  • PostgreSQL
  • sqlc
  • React
  • Mantine
  • Docker

Airbnb Clone

Ready
Featured

A full-stack property-rental platform (Airbnb clone) with a Java/Spring Boot backend: REST API, map search, bookings and tenant/landlord panels.

  • Backend: REST API in Spring Boot 3 (Java 21), Spring Data JPA + PostgreSQL, Liquibase, MapStruct, Maven.
  • Security: Spring Security + OAuth2/OIDC (Auth0), role-based access control (tenant/landlord).
  • Java 21
  • Spring Boot 3
  • Spring Security
  • Spring Data JPA
  • Angular
  • PostgreSQL
  • Auth0 (OAuth2)
  • Liquibase
  • Maven

ASVS Web App Scanner

Ready
Featured

An in-house web application security testing (DAST) automation platform in Go: it orchestrates external scanners and its own modules, maps findings to OWASP Top 10, ASVS and WSTG, and generates reports. I used it to test my own sites (portfolio, CV, KucharKi) and hardened them based on the findings.

  • Orchestrates nuclei, sqlmap, testssl, nmap, katana and more, plus its own modules: SQLi, command injection, NoSQL injection, CORS, TLS, cross-role access control; authenticated scans.
  • React dashboard + REST API in a single binary: RBAC, a Redis queue with workers, PostgreSQL, trends and scan diffs, scheduling and alerts (Discord/Slack).
  • Go
  • React
  • PostgreSQL
  • Redis
  • nuclei
  • sqlmap
  • OWASP ASVS / WSTG

MAKO Security - Discord bot

Production

A custom Discord bot keeping order on the MAKO server (~3000 members): role-ping moderation with exempt lists. Built, deployed, hosted and iterated on at the client's request.

  • TypeScript
  • discord.js
  • Node.js
  • Docker

Price Watcher - Discord bot

Production

A Discord bot tracking product prices in online shops: on-demand and scheduled checks, price history, thresholds and price-drop alerts. Products and sources are configured with a plain DM - no code changes, no restart.

  • TypeScript
  • discord.js
  • cheerio
  • croner
  • Docker

Termin Prawka - Discord bot

Production

A Discord bot alerting about free driving-test slots: mObywatel sign-in from a DM (Playwright), checks across several exam centres within the portal's rate limits. Running in production.

  • TypeScript
  • discord.js
  • Playwright
  • Docker
  • Tailscale

Składkowa

Production

An app for organizing potluck-style get-togethers - participants declare who brings what (food, drinks, extras), share photos and videos from the event, and a summary shows everyone's contribution. No more chaos in the group chat.

  • Next.js
  • Drizzle ORM
  • Neon
  • UploadThing
  • Cloudinary

Centralny system monitoringu (SIEM/ELK)

Ready

Engineering project: a scalable SIEM architecture (ELK Stack + Wazuh) for collecting, normalizing and visualizing logs and detecting incidents in real time.

  • Elasticsearch
  • Logstash
  • Kibana
  • Wazuh
  • Docker
  • Linux
  • Python

Benchmark baz danych dla SIEM

Ready

Engineering thesis: comparative performance analysis of 6 database engines (SQL vs NoSQL) for a SIEM architecture - writes and analytical queries over 1M records across 50+ scenarios.

  • Python
  • MongoDB
  • PostgreSQL
  • MySQL
  • ClickHouse
  • Cassandra
  • Redis

Experience

  1. Software Developer (Specialist)

    2026 - present

    Auschwitz-Birkenau State Museum in Oświęcim

    • Digital Repository department (Archival Analysis and Information Section): converting video material for the digital repository.
    • Designed and delivered the bilingual (PL/EN) Visitor Service Center website on WordPress: ~50 pages, a former-prisoner inquiry form stored in a database with SMTP delivery, and an accessibility statement.
    • Conducted two digital accessibility audits (WCAG 2.2 AA): manual and automated testing, reports with recommendations.
    • Building the tools the department needs to support its work and automate repetitive tasks.
    • Security audit and penetration testing of a web application (Vue) providing data on camp prisoners and victims (in progress).
    • WordPress
    • WCAG 2.2 AA
    • OWASP
    • Pentesting
    • Vue
  2. Software Developer

    2025 - 2026

    LT2 Sp. z o.o.

    • Built a commercial, multi-platform SaaS for Sale Zabaw Fikołki Sp. z o.o. - the customer web app, the admin panel and related services (the 'Fikołki' project).
    • Built secure, responsive web apps in React/Next.js integrated with Python (FastAPI) backends; focus on scalable architecture and clean code.
    • Administered and monitored Microsoft Azure services; advanced log analysis (KQL) and IAM configuration (RBAC, Service Principals).
    • Integrated external systems (Firebase, Google Analytics) and built user-input validation mechanisms.
    • Worked in Linux, containerization (Docker), version control (Git) and secure coding practices.
    • React
    • Next.js
    • Python (FastAPI)
    • Azure
    • Docker
    • Firebase
  3. IT Systems Implementation Specialist

    2023 - 2024

    REKORD SI Sp. z o.o.

    • End-to-end deployment of ERP and financial-accounting systems for business and the public sector (local government), including roles and access configuration.
    • Data migrations (ETL) to PostgreSQL and Firebird databases ensuring data integrity.
    • Process automation with scripts (Bash/PowerShell); CSV/Excel data import, export and transformation.
    • Administered Linux and Windows Server environments at clients; service configuration, access management, business continuity.
    • Client collaboration (training, technical support) and functional testing before production rollout.
    • PostgreSQL
    • Firebird
    • Bash
    • PowerShell
    • Linux
    • Windows Server
  4. Frontend Developer / QA Tester

    2023 - 2023

    REKORD SI Sp. z o.o.

    • Functional and integration testing of desktop and web apps; data-integrity verification.
    • Bug reporting and collaboration with the dev team across the full software development lifecycle (SDLC).
    • Manual testing
    • C#
    • Angular 16
    • TypeScript

Education

  1. Computer Science - Cybersecurity (M.Eng.)

    2025 - present

    Cracow University of Technology

    Cybersecurity cohort representative.

    Web application security, Advanced programming techniques, Threat detection & incident response, Cloud security, Penetration testing, Security audits & compliance

  2. Computer Science - IT in Business (B.Eng.)

    2021 - 2025

    Witold Pilecki State University of Małopolska in Oświęcim

    Year representative and Student Council President.

    Data structures & algorithms (C++), Operating systems (Linux), Database systems (SQL), Computer networks (TCP/IP), Object-oriented programming

  3. Physical Education (B.A.)

    2016 - 2022

    Witold Pilecki State University of Małopolska in Oświęcim

    Specialization: recreation instructor.

Certifications

  • Website accessibility auditing to the WCAG standardplanned

    Certes · 2027

  • CyberOps Associate

    Cisco / ECSC · 2025

  • Junior Cybersecurity Analyst

    Cisco & Akademia CyberMIL · 2025

  • Ethical Hacker

    Cisco & Akademia CyberMIL · 2025

  • Internal Auditor ISO 9001:2015

    Weil Consulting · 2021

  • Six Sigma Yellow Belt

    Weil Consulting · 2021

Other

2nd dan Ju-Jitsu (2024) · Martial arts instructor (2021) · Self-defence instructor (2021) · Fitness instructor (2021)

Contact

or email me directly: bnoworyta@proton.me