Yaroslav

Yaroslav Pelenychka
Full-Stack Developer/Platform engineer
[відкрити контакти](див. вище в блоці «контактна інформація») | [відкрити контакти](див. вище в блоці «контактна інформація») | Lviv, Ukraine | LinkedIn | GitHub

SUMMARY
Full-Stack Developer with 3+ years of experience delivering web applications end to end: from pixel-perfect Vue/Nuxt interfaces to Node.js
services and serverless infrastructure on AWS. Experienced in integrating AI models (Hugging Face, Qwen, Flux) into production features and in
owning deployments: CI/CD, Docker, Kubernetes, and Linux servers. Comfortable taking a feature from Figma and requirements through API
design, database modelling, testing, and release. Cybersecurity background: apply OWASP Top 10 practices and run security audits of web
applications and APIs. Currently at Softonix, previously at Appexoft and Nestlé.

PROFESSIONAL EXPERIENCE
Softonix, Full-Stack Developer / Platform Engineer 08/2024 – Present | Lviv, Ukraine
Develop and maintain SPA and SSR web applications with Vue 3, Nuxt 3/4, TypeScript, and Pinia, using the Composition API and a scalable,
•

reusable component architecture.
Build responsive, pixel-perfect, cross-browser UI from Figma designs using HTML5, SCSS, Tailwind CSS, and Element Plus, with attention to
•

accessibility and Core Web Vitals.
Design and implement RESTful APIs and backend services with Node.js, Fastify, Express, and TypeScript; model data in PostgreSQL with
•

Drizzle ORM and Supabase; validate requests with Zod.
Integrate AI services into product features (Hugging Face Inference API, Qwen, Flux) for text and image generation, including prompt handling,
•

queueing, and result storage.
Implement authentication and authorization (JWT, OAuth 2.0, Supabase Auth), role-based access control, and secure file upload/storage flows
•

(Amazon S3, Supabase Storage).
Conduct security audits of web applications and REST APIs against OWASP Top 10 (injection, broken access control, XSS, CSRF, security
•

misconfiguration); remediate findings with input validation, parameterized queries, CORS and CSP policies, rate limiting, and secure headers.
Design and deploy serverless, event-driven solutions on AWS using Lambda, API Gateway, SQS, S3, DynamoDB, and CloudFront.
•

Set up and maintain CI/CD pipelines with GitHub Actions; containerize services with Docker and deploy them to Kubernetes (K8s) clusters and
•

Linux VPS with Nginx and SSL.
Write unit and integration tests (Vitest, Jest), participate in code reviews, and document APIs with OpenAPI/Swagger.
•

Debug, refactor, and optimize frontend and backend code for performance and maintainability; work in an Agile/Scrum process with Jira.
•

Appexoft, Full-Stack Developer / Platform Engineer 05/2023 – 03/2024 | Lviv, Ukraine
Built React applications with TypeScript (JSX/TSX), hooks, React Router, Redux, and functional components.
•

Created pixel-perfect, responsive web pages from Figma grid layouts using HTML5, CSS3, SASS, and JavaScript (ES6+).
•

Developed backend features and REST APIs with Node.js and Express, including authentication, input validation, error handling, and
•

protection against common OWASP vulnerabilities.
Worked with MongoDB (Mongoose) and PostgreSQL (Sequelize); designed schemas and wrote queries and migrations.
•

Integrated third-party REST APIs and handled asynchronous data flows with Axios.
•

Performed code reviews, investigated, reproduced, and fixed bugs; collaborated with designers and QA in an Agile team.
•

Used Git/GitHub for version control with feature branches and pull requests.
•

Nestlé, Drupal Developer 12/2021 – 06/2022 | Lviv, Ukraine
Created reusable and responsive HTML/CSS templates for Drupal, ensuring cross-browser compatibility and pixel-perfect implementation
•

based on design specifications.
Led a small development team on a pet project, managing tasks, workflows, and priorities in Trello and Jira, mentoring team members and
•

coordinating project milestones.
Contributed to real-world projects across the full development lifecycle: requirements analysis, design, implementation, testing, and
•

deployment.
Collaborated with team members to improve development processes, maintain code quality, and apply best practices across frontend and
•

backend.

SKILLS
Languages: JavaScript (ES6+) | TypeScript | Python | HTML5 | CSS3 | SQL | Bash | C++ | C
Front-end: Vue.js 3/2 | Nuxt 3/4 | Composition API | Vue Router | Pinia | Vuex | Element Plus | React | Next.js | Redux | Zustand | MobX | React
Router | Tailwind CSS | SCSS/SASS | Bootstrap | Responsive & Adaptive Design | SSR/SSG | SEO | Accessibility (a11y) | i18n | Axios | Vite | Webpack |
Storybook
Back-end: Node.js | Express.js | Fastify | NestJS | REST API design | WebSockets | Middleware architecture | Authentication & Authorization (JWT,
OAuth 2.0, RBAC) | Request validation (Zod) | File upload handling (multipart/form-data) | Error handling & logging | Environment configuration |
OpenAPI/Swagger
Databases & Storage: PostgreSQL | MySQL | MongoDB | DynamoDB | Redis | Supabase | Firebase | Drizzle ORM | Sequelize | Mongoose | Prisma |
Amazon S3 | Supabase Storage | Database design & migrations
Cloud & DevOps: AWS (Lambda, API Gateway, S3, SQS, DynamoDB, CloudFront, IAM) | Google Cloud Platform (GCP) | Serverless architecture |
Docker | Docker Compose | Kubernetes (K8s) | Helm | kubectl | CI/CD | GitHub Actions | Terraform | Ansible | Linux / VPS administration | Nginx |
Cloud-init | DNS & SSL configuration | Deployment automation | Monitoring & logging
Testing & Quality: Vitest | Jest | Testing Library | Playwright | Cypress | ESLint | Prettier | Code review | Postman
Security: OWASP Top 10 | Web application security audit | API security | Authentication & session security (JWT, OAuth 2.0) | CORS | CSP |
XSS/CSRF/SQL injection prevention | Rate limiting | Secrets management | Helmet | OWASP ZAP | Burp Suite
AI Integration: Hugging Face Inference API | Qwen | Flux | OpenAI API | Claude API | Gemini API | Prompt engineering
AI-assisted Development: Cursor | Windsurf | Claude Code | Codex | GitHub Copilot | NotebookLM
Tools & Practices: Git | GitHub | GitLab | Jira | Trello | Figma | Agile/Scrum | Kanban | npm/pnpm/yarn

EDUCATION
Lviv Polytechnic National University
Cybersecurity
IT-Step Academy
JS / C++ / HTML / CSS / C
Mate academy
Frontend/Fullstack course
Complete Vue Developer Bootcamp

LANGUAGES

English — Upper-Intermediate (B2) Polish — Intermediate (B1) Italian — Beginner (A1) Ukrainian — Native