×
Maksym Kolomiets

Maksym Kolomiets

Full-Stack & Agentic Systems Engineer | Open-Source Tooling (MCP) | OSINT & Verification

Melbourne, Victoria, AU
+61 481 517 830

Background


About

About

Full-stack developer and open-source tool builder focused on reliable agentic workflows, Model Context Protocol (MCP) bridges, and research/investigation tooling. Experienced in running open-source models (Qwen3 via Ollama) behind strict schema validation gates that prevent hallucinated actions, building high-speed Elasticsearch discovery interfaces for large document corpora (recognised by Elastic at UNIHACK 2026), and writing Python CLI tools for open-source threat and indicator triage. Active in the Melbourne public-interest security community as Treasurer of the Monash Cyber Security Club (MonSec). Available for flexible remote hours with daily overlap for European teams.

Work Experience

Work Experience

  • Web Developer (Contract), YourAlly Pty Ltd

    - Present

    Client project: company website build.

    • Collaborated directly with non-technical company leadership to scope, design, build, and deploy the public web platform for YourAlly Pty Ltd from scratch.

    • Delivered responsive frontend interfaces, cross-browser testing, and deployment documentation.

  • Smart Contract Developer, Smart Contract Development (Remote)

    Mar, 2021 - Dec, 20219 months

    Solidity, Web3.js, Node.js, Polygon.

    • Developed and tested Solidity smart contracts integrated with Node.js backend services and Web3.js frontends, verifying transaction handling and failure recovery across the stack.

    • Investigated security risks, missing validation checks, and invalid state transitions prior to deployment, working with the team to reproduce and fix defects.

Projects Experience

Projects Experience

  • mcp-server-figma

    - Present

    Open-Source Model Context Protocol (MCP) Server & WebSocket Bridge

    • Built a free, open-source MCP server that connects AI agents to external application state through structured tool definitions and human-observable execution.

    • Designed a two-way data bridge: read queries run through the REST API, while write operations pass through a local WebSocket server to a companion plugin so users can inspect and control changes in real time.

  • promokit

    - Present

    Open-Source LLM Harness, Deterministic Validation & Web Capture CLI

    • Built an MIT-licensed CLI workflow that uses Playwright to scrape structured facts and element IDs from live web pages and passes them to an open-source LLM (Qwen3-8B via Ollama) to plan automated browser sequences.

    • Created a deterministic evaluation and retry loop: model outputs are restricted to verified DOM IDs from the source page and checked against a strict schema. Any hallucinated selector or invalid action is rejected and returned to the model with error feedback until validation passes.

    • Built a reproducible browser capture pipeline that pauses the page clock and steps it forward by 1/30 second per frame before composing audio and encoding video with FFmpeg.

  • search-comète

    - Present

    Multi-Decade Research Discovery Engine (Elastic Award – UNIHACK 2026)

    • Awarded Honorable Mention for Best Use of Elastic Technology (top 3 of 183 projects across 1,010 participants) and featured on the Elastic engineering blog for scalable search design.

    • Built an interactive search and categorization interface over decades of academic reports (1970s–2026) using Elasticsearch and vector search, giving researchers timeline toggles and visual filters to narrow down large document sets quickly.

  • PurrAssist

    - Present

    Full-Stack AI Research Workspace: Document RAG, Whisper ASR & Safety Gates

    • Built a full-stack workspace (React 19, Redux Toolkit, FastAPI, MongoDB, Docker, GitHub Actions CI/CD) combining PDF document search, notes, calendar tools, and voice transcription.

    • Implemented PDF ingestion with FAISS semantic retrieval, LangChain workflow coordination, and OpenAI Whisper speech-to-text paired with Piper text-to-speech.

    • Applied constrained-output validation to the assistant's tool-calling layer to restrict which actions model outputs can trigger and reduce prompt-injection risks.

  • ioc-enrich

    - Present

    Python OSINT & Threat-Intelligence Triage CLI

    • Built a Python command-line tool for open-source investigation and enrichment of Indicators of Compromise (IP addresses, file hashes, and domains), aggregating and cross-checking records across the VirusTotal and AbuseIPDB APIs.

  • UNIHACK 2025 Prototype

    - Present

    Full-stack Python/JavaScript hackathon prototype

  • Terminal ASCII 3D Renderer

    - Present

    Terminal-based ASCII 3D renderer (in progress)

  • IMU Sensor-Fusion Project

    - Present

    IMU sensor-fusion project (in progress)

Skills

Skills

  • Agentic AI & Open-Source Models

    Model Context Protocol (MCP) servers

    Open-source LLM orchestration (Qwen3 / Ollama)

    Constrained output validation & evaluation loops

    LangChain

    OpenAI API

    Whisper ASR

    Piper TTS

  • Search, Data & OSINT

    Elasticsearch

    FAISS vector search

    PostgreSQL

    MySQL

    MongoDB

    VirusTotal & AbuseIPDB APIs

    Playwright (automated web scraping & deterministic browser capture)

    FFmpeg

  • Full-Stack & Infrastructure

    Python (FastAPI, CLI tooling)

    TypeScript

    JavaScript (ES6+)

    React 19

    Redux Toolkit

    Vite

    Tailwind CSS

    Node.js

    REST APIs

    WebSockets

    Docker

    GitHub Actions CI/CD

Education

Education

  • Computer Science – Cybersecurity and Software Development Specialisation, Bachelor, Monash University

    - Jan, 2027

Awards

Awards

  • Honorable Mention – Best Use of Elastic Technology , Elastic @ UNIHACK 2026

    Awarded on: Jan 01, 2026

    Top 3 of 183 projects across 1,010 participants for search-comète; featured on the Elastic engineering blog for scalable search design.

Volunteer Work

Volunteer Work

  • Treasurer, MonSec – Monash University Cyber Security Club (800+ Members)

    Jan, 2026 - Present

    Melbourne, VIC

    • Manage club finances and sponsorship partnerships for an 800-member student cybersecurity community that runs 40+ educational workshops, CTFs, and open security events each year.

    • Coordinate events and partnerships with security practitioners from CyberCX, Palo Alto Networks, Wiz, and NTT DATA.

  • Conference Volunteer, CyberCon 2026 – Australian Information Security Association (AISA)

    Oct, 2026 - Oct, 2026

    Melbourne, VIC

    • Supported delegate operations and session logistics across a three-day national cybersecurity conference at the Melbourne Convention & Exhibition Centre.