Jeff Smolinski

Full-Stack Engineer

Security Engineer

EXPERIENCE

Synergetic Holdings, LLC (Synergetic Solutions), Principal Consultant

2018 to present

  • Providing greenfield and legacy development as a service for client web apps and cloud infrastructure informed by security requirements, threat modeling, and secure code review.
  • Conducting technical due diligence to evaluate security compliance readiness, guide clients through compliance efforts, and deliver technical assessments to inform funding decisions.
  • Driving enterprise customer acquisition by architecting and implementing Governance Risk Compliance programs and authentication infrastructure that eliminate technical barriers in enterprise sales.

Notable Projects

Employee Benefit Plan Audit Platform
Technologies: Vue.js, Django REST Framework, PostgreSQL, Pandas, openpyxl, Microsoft Azure
Details
  • Built an MVP that gained traction within 3 months.
  • Introduced an Agile workflow that raised team efficiency by 20%.
  • Hired and mentored engineers, growing the engineering team fourfold.
  • Wrote a custom ETL pipeline for 401(k) and payroll data from 20+ sources, saving auditors about 30 hours per project.
  • Set up CI/CD, doubling delivery speed.
  • Led development of the platform, which reached $1M ARR in its first year.
  • Implemented security controls and a SOC 2 program, opening enterprise sales and raising company value sixfold.
  • Led the GRC program and sat on the governance committee, filling the fractional CISO role.
Sports Team Communication Platform
Technologies: React, TypeScript, React Native, PostgreSQL, GCP, Firebase, Terraform, Claude Code
Details
  • Helped the client win $75,000 in grant funding for prototype development.
  • Shipped the mobile app to both app stores within 4 months.
  • Implemented an agentic SDLC with technical discovery, requirements engineering, test-first delivery, security review and acceptance testing.
  • Found and fixed security vulnerabilities inherited from a legacy Replit codebase.
  • In progress: Building a GRC program for SOC 2 and FERPA compliance.
  • In progress: Product-market fit validation, go-to-market strategy and a custom advertising network for monetization.
  • Averaged 80+ tickets and 12 merged pull requests a week using an agentic SDLC.
Hospital Capacity Planning Application
Technologies: React, Go, GCP, Firebase, Google BigQuery, Claude Code
Details
  • Improved the UX in React, raising customer adoption by 50%.
  • Built data collection and matching methods that save about 30 minutes of manual work per data source.
  • Extended the ETL pipeline to ingest large CMS (Centers for Medicare & Medicaid Services) datasets.
  • Curated and restructured a legacy data lake, laying the groundwork for AI and machine learning.
  • Tied Stripe subscription status to role-based access control for billing and permissions.
  • Designed multi-tenant support so organizations can manage employee accounts and share project data.
  • Built public hospital directory from CMS cost report data (HCRIS), using an agentic SDLC workflow.
Physical Security Services Company
Technologies: Python, GeoPandas, TypeScript, React, PostgreSQL, Private VPS
Details
  • Aggregated, cleaned, geotagged and geofenced Omaha, NE police incident data to strengthen the company's threat intelligence and staffing decisions.
  • Modernized client camera systems, laying the foundation for Flock Safety municipal camera network integration.
  • Designed a scheduling, billing and communication system that sped up client communication and halved administrative overhead.
Scheduling Platform Connecting Entertainers With Retirement Communities
Technologies: Next.js, Neo4j, Private VPS, Claude Code
Details
  • Served as CTO and board member, guiding technical implementation and market strategy.
  • Designed infrastructure for 20% annual user growth, with network activity doubling each year.
  • Developed a data cleaning and migration strategy for the Neo4j graph database.
  • Implemented an agentic SDLC with technical discovery, requirements engineering, test-first delivery, security review and acceptance testing.
  • Designed an SDK and v2 API for wider adoption in the scheduling space, using Neo4j's graph features for real-time availability and location intelligence.
Trust Center Directory
Technologies: Python, DuckDB, Common Crawl, Claude API, Parquet, Google Cloud Storage, Google BigQuery
Details
  • Built and run a public directory of 8,900+ organizations with a public compliance footprint, refreshed monthly.
  • Designed the data pipeline: Common Crawl via DuckDB, DNS discovery, parsers for four trust-center platforms, Claude-based classification, and Parquet snapshots in GCS and BigQuery.
  • Published an open-core dataset (CC BY 4.0) with versioned releases and evidence-checked community corrections.
Tabletop Scenario Library
Technologies: Claude Code, Agent Skills, GitHub Actions, Astro, Cloudflare Pages
Details
  • Built a weekly agentic content pipeline turning real security incidents into tabletop exercise scenarios: scheduled Claude intake with review and greenlight steps, lint and rubric checks enforced in code, and automated publishing and social export.

Security Research

Responsible Vulnerability Disclosures

  • CVE-2021-42053 (5.4 Medium (CVSS 3.1))
    • Cross-site scripting in the Unicorn framework for Django (through 0.35.3).
    • 1 library, 6 packages and 249 repositories impacted.
  • CVE-2021-42134 (6.1 Medium (CVSS 3.1))
    • Cross-site scripting in the Unicorn framework for Django (before 0.36.1), from an incomplete fix for CVE-2021-42053.
    • 1 library, 6 packages and 249 repositories impacted.

Publications

W. Mahoney, P. Sigillito, J. Smolinski, T. McDonald, and G. Grispos, "Analyzing the Performance of Block-Splitting in LLVM Fingerprinting," International Conference on Cyber Warfare and Security, vol. 17, no. 1. Academic Conferences International Ltd, pp. 176–184, Mar. 02, 2022. doi: 10.34190/iccws.17.1.39.

Competitions

MITRE Embedded Capture the Flag (eCTF), 2020
Designed a secure audio DRM module for a next-generation multimedia player on the Digilent Cora Z7.

EDUCATION

  • University of Nebraska Omaha, Omaha, NE: MS Cybersecurity (Cyber Operations), GPA 4.0
  • Adams State University, Alamosa, CO: BA General Studies, GPA 4.0

AWARDS

Certificate of Recognition, Omaha Chamber of Commerce (2017)

For teaching 20 small business owners WordPress development.

Open Source Projects

claude-skills
Mentioned in Awesome Claude Code 437K+ installs

67 specialized skills for full-stack developers.

View on GitHub
writing-with-agents
167 installs

A Claude Code plugin for writing with AI, built on Betty Flowers' Madman-Architect-Carpenter-Judge method.

View on GitHub
badfiles
39K+ downloads

A malicious file detection engine written with Python and Yara.

View on PyPI
fitness-tools
21K+ downloads

A library to help personal trainers optimize client training and macronutrient requirements.

View on PyPI
Jeff Smolinski headshot

Jeff Smolinski

Jeff Smolinski is Principal Consultant at Synergetic Solutions, where he builds and secures software and data systems for organizations that handle sensitive data. He led an employee benefit plan audit platform from MVP to $1M ARR in its first year, with a SOC 2 program certified in four months, and has helped clients win five Nebraska Innovation Grants totaling more than $375,000. A security researcher with two disclosed CVEs and peer-reviewed research, he holds an MS in Cybersecurity from the University of Nebraska Omaha. His open-source projects have passed 400,000 installs and downloads.

Get In Touch