Jeff Smolinski

Full-Stack Engineer

Security Engineer

EXPERIENCE


Synergetic Holdings, LLC (Synergetic Solutions), Principal Consultant

2018 to present

  • Providing greenfield and legacy development as a service for client web apps and cloud infrastructure informed by security requirements, threat modeling, and secure code review.
  • Conducting technical due diligence to evaluate security compliance readiness, guide clients through compliance efforts, and deliver technical assessments to inform funding decisions.
  • Driving enterprise customer acquisition by architecting and implementing Governance Risk Compliance programs and authentication infrastructure that eliminate technical barriers in enterprise sales.

Notable Clients

Employee benefit plan audit platform
Technologies: Vue.js, Django REST Framework, PostgreSQL, Pandas, openpyxl, Microsoft Azure
  • Led development of the platform, which reached $1M ARR in its first year.
  • Implemented security controls and a SOC 2 program, opening enterprise sales and raising company value sixfold.
  • Led the GRC program and sat on the governance committee, filling the fractional CISO role.
  • Wrote a custom ETL pipeline for 401(k) and payroll data from 20+ sources, saving auditors about 30 hours per project.
Sports team communication platform
Technologies: React, TypeScript, React Native, PostgreSQL, GCP, Firebase, Terraform, Claude Code
  • Averaged 80+ tickets and 12 merged pull requests a week using an agentic SDLC.
  • Shipped the mobile app to both app stores within 4 months.
  • Found and fixed security vulnerabilities inherited from a legacy Replit codebase.
Hospital capacity planning application
Technologies: React, Go, GCP, Firebase, Google BigQuery, Claude Code
  • Improved the UX in React, raising customer adoption by 50%.
  • Built data collection and matching methods that save about 30 minutes of manual work per data source.
  • Built public hospital directory from CMS cost report data (HCRIS), using an agentic SDLC workflow.
Physical security services company
Technologies: Python, GeoPandas, TypeScript, React, PostgreSQL, Private VPS
  • Aggregated, cleaned, geotagged and geofenced Omaha, NE police incident data to strengthen the company's threat intelligence and staffing decisions.
  • Modernized client camera systems, laying the foundation for Flock Safety municipal camera network integration.
  • Designed a scheduling, billing and communication system that sped up client communication and halved administrative overhead.
Scheduling platform connecting entertainers with retirement communities (CTO and board member)
Technologies: Next.js, Neo4j, Private VPS, Claude Code
  • Served as CTO and board member, guiding technical implementation and market strategy.
  • Designed infrastructure for 20% annual user growth, with network activity doubling each year.
  • Designed an SDK and v2 API for wider adoption in the scheduling space, using Neo4j's graph features for real-time availability and location intelligence.

Products

Trust Center Directory
  • Built and run a public directory of 8,900+ organizations with a public compliance footprint, refreshed monthly.
  • Designed the data pipeline: Common Crawl via DuckDB, DNS discovery, parsers for four trust-center platforms, Claude-based classification, and Parquet snapshots in GCS and BigQuery.
  • Published an open-core dataset (CC BY 4.0) with versioned releases and evidence-checked community corrections.
Tabletop Scenario Library
  • Built a weekly agentic content pipeline turning real security incidents into tabletop exercise scenarios: scheduled Claude intake with review and greenlight steps, lint and rubric checks enforced in code, and automated publishing and social export.

Security Research


Responsible Vulnerability Disclosures

  • CVE-2021-42053 (5.4 Medium (CVSS 3.1))
    • Cross-site scripting in the Unicorn framework for Django (through 0.35.3).
    • 1 library, 6 packages and 249 repositories impacted.
  • CVE-2021-42134 (6.1 Medium (CVSS 3.1))
    • Cross-site scripting in the Unicorn framework for Django (before 0.36.1), from an incomplete fix for CVE-2021-42053.
    • 1 library, 6 packages and 249 repositories impacted.

Publications

W. Mahoney, P. Sigillito, J. Smolinski, T. McDonald, and G. Grispos, "Analyzing the Performance of Block-Splitting in LLVM Fingerprinting," International Conference on Cyber Warfare and Security, vol. 17, no. 1. Academic Conferences International Ltd, pp. 176–184, Mar. 02, 2022. doi: 10.34190/iccws.17.1.39.

Competitions

MITRE Embedded Capture the Flag (eCTF), 2020
Designed a secure audio DRM module for a next-generation multimedia player on the Digilent Cora Z7.


EDUCATION

  • University of Nebraska Omaha, Omaha, NE: MS Cybersecurity (Cyber Operations), GPA 4.0
  • Adams State University, Alamosa, CO: BA General Studies, GPA 4.0

AWARDS

Certificate of Recognition, Omaha Chamber of Commerce (2017)

For teaching 20 small business owners WordPress development.

Open Source Projects

claude-skills
Mentioned in Awesome Claude Code 437K+ installs

67 specialized skills for full-stack developers.

View on GitHub
writing-with-agents
167 installs

A Claude Code plugin for writing with AI, built on Betty Flowers' Madman-Architect-Carpenter-Judge method.

View on GitHub
badfiles
39K+ downloads

A malicious file detection engine written with Python and Yara.

View on PyPI
fitness-tools
21K+ downloads

A library to help personal trainers optimize client training and macronutrient requirements.

View on PyPI
Jeff Smolinski headshot

Jeff Smolinski

Jeff Smolinski is Principal Consultant at Synergetic Solutions, where he builds and secures software and data systems for organizations that handle sensitive data. He led an employee benefit plan audit platform from MVP to $1M ARR in its first year, with a SOC 2 program certified in four months, and has helped clients win five Nebraska Innovation Grants totaling more than $375,000. A security researcher with two disclosed CVEs and peer-reviewed research, he holds an MS in Cybersecurity from the University of Nebraska Omaha. His open-source projects have passed 400,000 installs and downloads.

Get In Touch