Building calm, well-guarded systems in a noisy world. I harden cloud platforms, break applications before attackers can, and turn threat intel into detections that actually fire.
⟡ Ville Salminen ⟡ Espoo, FI ⟡
C:\VILLE> type readme.txt
Hello — I'm Ville Salminen, a Security Engineer based in Espoo, Finland. For the better part of a decade I've worked where software meets adversaries: reviewing code, designing secure cloud architectures, and building detection pipelines that help small teams defend large surfaces.
My approach is pragmatic. Security should be a paved road, not a toll booth — so I focus on guardrails developers barely notice: secure-by-default infrastructure modules, automated checks in CI, and threat models short enough to actually be read.
When something does go wrong, I'm the calm voice on the incident bridge. Afterwards, I write the post-mortem, fix the root cause, and make sure the same alert never pages anyone at 3 a.m. again.
Off the clock: capture-the-flag weekends, synthesizers, and long walks along the Espoo shoreline while the sun sets in exactly these colours.
A library of 40+ hardened Terraform modules with OPA policies enforced in CI. Teams ship encrypted, least-privilege infrastructure by default; misconfiguration findings dropped by 70% in two quarters.
Sigma rules versioned in Git, unit-tested against replayed attack telemetry and auto-deployed to the SIEM. Mapped to MITRE ATT&CK coverage dashboards; cut false positives by 60%.
An open-source Go tool that finds leaked credentials across repos, CI logs and container images, verifies them safely, and opens rotation tickets automatically. Used internally across 900+ repositories.
Pod Security admission, network policies and Falco runtime rules rolled out across 30 clusters without downtime — plus a self-service threat-model template every product team now uses at design time.
> ATDT …