Skip to content
View BrijeshBurfal's full-sized avatar
🎯
Focusing
🎯
Focusing
5 followers · 6 following

Achievements

Achievement: Pull Shark

Achievements

Achievement: Pull Shark

Block or report BrijeshBurfal

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
BrijeshBurfal/README.md

🚀 Brijesh Burfal

Software Engineer @ BlackRock • Kubernetes • Distributed Systems • DevOps

🧠 About Me

  • 💼 Software Engineer at BlackRock
  • ⚙️ Specializing in Kubernetes, CI/CD, and scalable backend systems
  • 🔐 Built production-grade systems using Vault & Secrets Automation
  • 🧩 Strong in DSA (C++) + Problem Solving mindset
  • 🚀 Currently exploring AI + Data Platforms + Distributed Systems

🛠️ Tech Stack

👨‍💻 Languages

Go Python C++ Bash

⚙️ DevOps & Cloud

Kubernetes Docker Terraform Argo

🔧 Tools

Vault GitHub Actions Linux

🔐 Security Research Contributions

🧨 DataHub (Open Source Security)

  • Reported and authored multiple security vulnerabilities in DataHub
  • Contributed to GitHub Security Advisories (GHSA) with critical findings in:
    • Java/Maven dependencies
    • Apache Kafka & PySpark images
    • Apache Airflow integrations
    • Container security & supply chain risks

📢 Notable Advisories

🔴 Critical

  • GHSA-pxmp-fgpq-7pxp — SnakeYAML vulnerability
  • GHSA-mfv5-wrp2-r728 — PySpark JAR vulnerabilities
  • GHSA-37m8-mvfr-fvfg — Kafka image vulnerability
  • GHSA-6x4p-c2p2-62wp — Maven vulnerability
  • GHSA-92v9-rh86-wgrv — Java dependency issue

🟠 High

  • GHSA-fhmj-65fg-6c4g — JAR package vulnerabilities
  • GHSA-hvrr-x346-5hgm — Netty & Maven issues

📢 Published (Credited as Reporter)

  • GHSA-wxq2-3f82-2xjj — Log4j vulnerability
  • GHSA-2q7w-7r2r-572w — PySpark vulnerability

🔗 GitLab Projects

👉 https://gitlab.com/users/BURFAL18/projects

📊 GitHub Stats

🎯 Current Focus

  • 📌 Advanced AI System Design + Distributed Systems
  • 📌 Building high-impact backend + DevOps projects

📫 Connect

⚡ Fun Mode

Debugging > Coding (because reality hits harder)

Popular repositories Loading

  1. argo-workflows argo-workflows Public

    Forked from argoproj/argo-workflows

    Workflow engine for Kubernetes

    Go 1

  2. kaniko kaniko Public

    Forked from GoogleContainerTools/kaniko

    Build Container Images In Kubernetes

    Go 1

  3. datahub datahub Public

    Forked from datahub-project/datahub

    The Metadata Platform for the Modern Data Stack

    Java 1

  4. AzureEvents AzureEvents Public

    Events based subscription for Azure

    Python 1

  5. ansible-get-dbt ansible-get-dbt Public

    Forked from mayankbatra123/ansible-get-dbt

    For ansible dbt role

  6. jettison jettison Public

    Forked from jettison-json/jettison

    Java