Ethan Roberts - Software Engineer & Security Researcher

Full-stack security software engineer with expertise in cybersecurity, systems design, fault-tolerant distributed environments, and IT Governance.

Experience

March 2024 - Present

Avius - Bournemouth, UK

Full-stack engineer working across Angular, TypeScript, C#/.NET, Security, and internal Kubernetes infrastructure.

Core engineer on 3-person team delivering an order management system in Angular, SignalR, and Orleans
Led end-to-end migration of production password hashing to Argon2id for SOC2 Type 2 compliance
Owned rebuild of legacy enterprise helpdesk system with modern architecture, side-by-side with production
Security administrator responsible for managing Microsoft Intune, Microsoft Defender for Endpoint, Tenable/Nessus Vulnerability Management, security alerting systems, and company security policies
Delivered 2 consecutive Cyber Essentials Plus audits and established the roadmap for SOC2 compliance

2019 - Present

HackerOne

Independent security researcher specialising in web application and API vulnerability discovery.

Responsibly disclosed 10+ high to critical severity vulnerabilities (CVSS 7.0+) at major technology companies
Primary focus on authentication, authorization, access control, and API security vulnerabilities
HackerOne profile: https://hackerone.com/bughacking

September 2022 - December 2023

Deloitte - London, UK

Consultant within Deloitte's Cyber Risk Advisory practice

Worked with highly regulated clients in Technology, Media, and Telecommunications
Created proposals for and participated in wargames, SOC2 readiness, incident response

September 2022 - March 2026

Multiverse - Degree Apprenticeship

September 2020 - July 2022

Ada, the National College for Digital Skills