Back to portfolio
Résumé · 2026

Joe Munene

Founder, Complex Developers. AI and Security Engineer.

Full-Stack Web (Next.js, React, Tailwind)Mobile (React Native, iOS and Android)Offensive and Defensive SecurityApplied AI and Machine LearningCross-Platform Desktop (Tauri, Rust)Systems and Networking
01

Summary

Founder of Complex Developers. A polymath by intent, working across security, machine learning, robotics and full-stack engineering. I build security-focused AI systems from the model up: GhostLM, an 81M-parameter language model trained from scratch in PyTorch, and ghostloop, a fail-closed agent runtime published on PyPI. Across 50+ repositories I ship production security tooling, full-stack platforms, and lead mobile and web development on EzCare, live on the App Store, Google Play and the web. Merged a contribution upstream into AutoGPT, with open contributions to PyTorch Ignite and the OWASP Cheat Sheet Series. Computer Science at Moi University, Nairobi.

02

Highlights

01Built and trained an 81M parameter transformer from scratch, every layer hand-written with no machine learning framework abstractions.
02Published ghostloop on PyPI (v1.0.3) with 359 passing tests and automated CI/CD.
03Lead mobile and web developer at EzCare AI since January 2026, shipping on iOS, Android and the web.
04Upstream contributor to PyTorch Ignite, AutoGPT, and the OWASP Cheat Sheet Series.
05Founder of Complex Developers, took the company platform from an empty repository to production.
03

Experience

Lead Mobile & Web Developer (contract, remote)

EzCare AI
Jan 2026 - Present
  • Lead development of EzCare across iOS, Android and the web, an AI wellness companion live on the App Store and Google Play.
  • Built the mobile app in React Native and Expo and ship its releases through EAS Build and Submit; the web app shares code with it in a Bun and Turborepo monorepo.
  • Designed the Supabase backend (PostgreSQL, auth, storage) with a type-safe tRPC and TanStack Query data layer, and built the EZBuddy AI coach on the Anthropic SDK.
  • Implemented onboarding, Google and Apple sign-in, the subscription paywall, and native camera, haptics and voice features.

Founder & Lead Developer

Complex Developers, Nairobi
2026 - Present
  • Run the studio end to end, covering client work, architecture, engineering, and deployment.
  • Built the company platform on Next.js and Prisma with a Postgres-backed admin CRM, where flagged projects sync to the public site automatically through Server Components and incremental static regeneration.
  • Standardized the stack across projects: Vercel and Supabase for deploys, JWT-authenticated API routes, and a shared design token system that keeps the brand consistent from landing page to dashboard.

Independent Developer & Security Researcher

Self-Employed, Nairobi
2023 - Present
  • Shipped 50+ open source projects across security, AI and machine learning, and full stack.
  • Built GhostLM, an 81M parameter decoder-only transformer, entirely from scratch in PyTorch with RoPE, SwiGLU, and RMSNorm, without using the transformers library. Trained it on a 422M token corpus I collected across 27 cybersecurity, code, and reasoning sources.
  • Shipped GhostBench alongside it, an evaluation suite using proper statistics like Wilson confidence intervals and McNemar paired tests, plus GhostAgent, a tool-using runtime, and an MCP server that works with Claude Desktop and Cursor.
  • Merged a contribution upstream into AutoGPT (#12805), fixing agent-name preservation in the visual builder's AgentExecutor node titles after reload.
  • Proposed a numerical-stability fix to PyTorch Ignite (#3741, open PR): replacing an unstable variance formula in PearsonCorrelation with Welford's algorithm, which returned wrong results on large-mean float32 data.
  • Built ghostloop, an agent runtime and fail-closed safety pipeline for robotics, published on PyPI (v1.0.3) with a live demo and full CI/CD, 359 passing tests, and extended into a web dashboard and a Tauri desktop app.
  • Shipped linkdrop, a Tauri and Rust desktop app that bridges an iPhone to Linux for photos, files, and screen mirroring, with CI-built .deb and .AppImage releases.
  • Built a cybersecurity tooling set including an MCP security server with sandboxing, a Kubernetes CIS auditor, a memory forensics tool, a SIGMA-rule SIEM, and a pre-commit secret scanner.
  • Wrote the AI Model Supply Chain Security guide, proposed to the OWASP Cheat Sheet Series and revised through maintainer review.
04

Education

Bachelor of Science in Computer Science

Moi University
2025 - Present

Coursework in data structures and algorithms, operating systems, computer networks, and discrete mathematics. Self-directed focus on offensive security, transformer architectures, and systems programming.

05

Technical skills

Languages
Python, TypeScript, JavaScript, Rust, C, Swift, SQL, Bash
Frontend
Next.js, React, Tailwind CSS, Vite, Framer Motion, Three.js, TanStack Query, Zustand
Mobile
React Native, Expo, EAS Build, iOS (App Store), Android (Google Play)
Backend
Node.js, Bun, FastAPI, Express, tRPC, Prisma, PostgreSQL, Supabase, Stripe, JWT auth
AI and Machine Learning
PyTorch, from-scratch transformers, BPE tokenization, HuggingFace, vector search with LanceDB, MCP servers, Anthropic SDK
Robotics and RL
MuJoCo, PyBullet, ROS 2, Gymnasium, Safe RL, sim-to-real, VLA models
Offensive Security
Penetration testing, CTF, Nmap, Wireshark, Burp Suite, Metasploit, Scapy
Defensive Security
YARA, Volatility, Sigma rules, STIX and MISP, Kubernetes CIS auditing, secret scanning
Cross-Platform Desktop
Tauri (Rust), Electron
DevOps and Infra
Docker, Kubernetes, Terraform, GitHub Actions, Vercel, Cloudflare, Turborepo
Testing and Quality
Vitest, pytest, ESLint, Sentry, PostHog
06

Selected projects

The Ninefold
Unreal Engine 5 · C++ · in development
A solo third-person action game in Unreal Engine 5, built around cinematic boss fights, with a reusable C++ combat framework: token-based enemy AI, an encirclement system, a multi-phase boss base, and aim, camera, and encounter systems.
linkdrop
v0.7.1 · CI-built .deb + .AppImage
A Tauri and Rust desktop app that bridges an iPhone to Linux for photos, files, notifications, and screen mirroring, with CI-built .deb and .AppImage releases.
EzCare
Live on iOS, Android and web
Lead mobile and web developer on EzCare, a React Native and Expo wellness app live on the App Store and Google Play, plus its web app, with a Supabase backend, a tRPC data layer, and an AI coach on the Anthropic SDK.
GhostLM
81M params · 422M-token corpus · pure PyTorch
An 81M-parameter cybersecurity language model trained from scratch in PyTorch (RoPE, SwiGLU, RMSNorm), with a tool-using agent runtime, multi-vendor API and MCP servers, and a statistically rigorous eval suite.
07

Study & research

  • Independent cybersecurity research in CVE reasoning, exploit-chain analysis, and vulnerability triage.
  • Active CTF competitor in penetration testing, reverse engineering, and steganography.
  • From-scratch language model engineering, covering transformer internals, attention, tokenization, and training.
  • Open source contributor to PyTorch Ignite, AutoGPT, and OWASP CheatSheetSeries.
  • Self-directed study in deep learning, systems programming, and network security.
08

Languages

English (fluent)Swahili (native)