Skip to content
Simone Russo

Available for new projectsItaly · remote

Built to work.Tested to break.

Full-stack developer and application security. TypeScript, Node, PostgreSQL — and the part most developers skip.

Role
Full-stack developer
Focus
Product + security
Base
Italy · remote
Status
Open to work
01

The work

Real constraints, real trade-offs, no concept mockups. Selected projects, written the way I would explain them to a colleague.

02

What I do

Three things I do. Every engagement starts with a written scope — good for both of us.

S.01

Product build

From an empty repository to something real users can break. I handle the schema, the API and the interface, and I stay for the boring part: maintenance.

  • MVPs in weeks, not quarters
  • TypeScript, Next.js, Node, PostgreSQL
  • Handover-friendly code, documented decisions
S.02

Secure review

I read your code like an attacker and hand you a list of what to fix first. Offensive mindset, defensive delivery.

  • OWASP Top 10 review
  • Threat modeling and auth flows
  • CTF player, starting bug bounty
  • Written authorization and scope, always
S.03

Rescue

For the project that was almost done eight months ago. I assess it, cut what is dead, and get it to production.

  • Codebase audit in days
  • Refactor without a rewrite
  • Deployment, CI and monitoring

Two ways to work together

For clients

You have a product to ship

An MVP, a rescue, or a second opinion on the code that matters. One person, from schema to deployment.

  • Scope written before the first commit
  • Weekly updates, no status meetings
  • Code another developer can pick up
Start a project
For teams

You are hiring

Full-stack TypeScript with security built in. I read code the way an attacker would, and I write down the decisions that are expensive to undo.

  • TypeScript, Node, PostgreSQL in production
  • Security reviews and threat modeling
  • Remote, EU timezone
Talk about a role
03

The player

The short version, no buzzwords.

Portrait of Simone Russo, full-stack developer
PortraitShot 04 · 2026

I'm Simone, a full-stack developer in Italy. I build web products end to end: Next.js and TypeScript on the front end, Node and PostgreSQL on the back end, deployment and maintenance included. Most of my work starts as an empty repository.

The parts I care about are the ones nobody demos: schemas that survive the second feature, auth that fails closed, error handling that doesn't wake anyone at 3 a.m. I play CTFs and I'm getting into bug bounty, because shipping software without knowing how it breaks is just guessing.

I work alone or embedded in a team, and I write down the decisions that are expensive to undo.

“I like software that's boring to maintain. That's the whole philosophy.”

Loadout

Photography
@erru.sso · light first
Karting
KZ 125 · K9C
Piano
Since secondary school
Cinema
Tarantino, chapter by chapter
Now
CTFs, bug bounty, PipeDuck
NOW

Now / Building

A live snapshot from GitHub: the repositories I am working in, the issues I closed, and the ones still open.

04

Off the clock

Two frames from @erru.sso. The rest of the roll is on Instagram.

05

Contact

One email is enough to start.

Got something to build, or something to break?

CV full-stackCV AppSecgithub.com/ErRussoAvailable for new projectsLocal time--:--