AI-Assisted Security Vetting for IoT Systems
A local Rust tool that combines dependency information, software bills of materials (SBOMs), and vulnerability data into security findings for human review.
RustIoTSecurity
Thomas Bonderup
Software Engineer Backend Systems & IoT
I'm a software engineer based in Aalborg, Denmark, working with backend development, distributed systems, and connected devices.
My experience spans energy platforms, software integrations, and IoT engineering, with a particular interest in system reliability and security.
Aalborg, Denmark · Danish & English · Remote & on-site
Independent work
Selected projects
A selection of personal engineering projects covering IoT, backend development, and security.
Java 21 Spring Boot Certificate Control Plane API for IoT Fleets
A Java 21 and Spring Boot API for managing IoT certificate lifecycles, with tenant-aware endpoints, Keycloak authentication, PostgreSQL, Kafka outbox events, and 88 automated tests.
JavaSpring BootIoT
Evidence-Based Audit Engine for IoT Security & Reliability
An audit engine built with Rust probes and Scala ZIO to collect technical evidence, evaluate versioned rules, and track security and reliability regressions between runs.
IoTAuditSecurity
Engineering focus
Backend & distributed systems
Backend APIs, service integrations, databases, and event-driven systems. My professional work includes C#/.NET and PostgreSQL for energy platforms, alongside experience with Java, Scala, and Kafka.
IoT & edge-to-cloud systems
Connected-device software, gateways, telemetry, and communication between physical devices and cloud services. I've worked with Rust, MQTT, HTTP, TLS, and device authentication.
Reliability & observability
Understanding how software behaves when things go wrong: failure handling, retries, logging, monitoring, and incident investigation. Making it easier to see what happened and why.
Thomas Bonderup
Denmark-based software engineer
About me
I have an MSc in Computer Science and Informatics, with professional experience in backend development, secure software, data platforms, and energy technology.
In my current role, I develop backend services and integrations for an energy platform, working with C#/.NET, PostgreSQL, and connected energy devices. I work from understanding the problem through implementation, testing, and deployment.
I'm particularly interested in the connection between software and physical systems: unreliable connections, device limitations, inconsistent data, and understanding what happened when something fails.
Outside work, I build independent IoT security and gateway projects through Combotto. The projects and articles here document that work.
Technologies I've worked with
- C#/.NET
- PostgreSQL
- Rust
- Java
- Scala
- Python
- Kafka
- MQTT
- Docker
- Linux
- OpenTelemetry
- AWS
- GCP
Articles
Technical writing
I write about software architecture, IoT, and engineering decisions from my projects and technical work.
Combotto.io Is Live: My Future Direction in IoT, Embedded Software, and Rust
Why I focus my independent engineering work on connected devices, embedded software, and Rust, and how that builds on my thesis, earlier projects, and professional experience.
IoTEmbedded SoftwareRust
Migrating an IoT Audit Engine into a Java 21 + Spring Boot Platform
The design of a Java 21 and Spring Boot control plane around an existing Scala ZIO execution engine, and the reasons for keeping those responsibilities separate.
IoTAuditMigration
Designing an Evidence-Based Audit Engine for IoT Security & Reliability
A walkthrough of an audit system built with Rust probes and Scala ZIO: collecting evidence, evaluating versioned rules, and comparing findings over time.
IoTAuditSecurity
Get in touch
Interested in discussing backend development, IoT, or software engineering? I'm open to conversations about engineering opportunities, technical projects, and the work shared on this site.