Manuel Sepúlveda

M.Sc. in Computer Science thesis on the secure publication of aggregate statistics in verifiable electronic voting. Advisors: Alejandro Hevia and Camilo Gómez. Submitted and under review; defense expected between December 2026 and February 2027.

• My master’s thesis at CLCERT, Universidad de Chile, designs a cryptographic mechanism to publish statistics of a verifiable electronic vote without compromising ballot secrecy, in the context of UParticipa.
• The thesis aims for published voting statistics that are useful without breaking ballot secrecy or end-to-end verifiability.

IT department: internal systems, products for clients and technology exploration for automation, customer service, education and cloud integration.

• Built an educational kiosk from scratch, frontend and backend: a multi-tenant interactive touchscreen platform for schools, installed in a school. Stack: React, Electron, FastAPI, SQLModel, Cloud SQL, Cloud Storage, Cloud Run and Docker.
• In the educational kiosk, implemented JWT authentication with roles (administrator, teacher and student), QR login for the touchscreen, document uploads for teachers and document printing for students.
• Connected the educational kiosk to real printers: PaperCut to control print quotas and costs, and SNMP to monitor toner, paper and errors.
• Gathered the needs of different schools with DIMACOFI’s marketing and sales teams, and met them with a multi-tenant design that separates data and configuration per school.
• Automated the update of more than 2,000 billing-critical addresses in Oracle EBS; by hand, 100 records took about 3 days. The workflow stayed reusable for new records.
• Designed the Python workflow behind the Oracle EBS address automation: normalization and deduplication in SQLite, batch enrichment against Oracle, reports of missing or ambiguous matches for manual review, and Selenium with logs.
• During my first internship at DIMACOFI (January to March 2024), built a working demo of an AI virtual assistant for customer service over WhatsApp, with ticket creation through an internal API, product recommendations with images and email verification by PIN. Stack: Botpress, ChatGPT Assistants, Make and WhatsApp Business.
• In the AI virtual assistant demo, gated critical functions behind a prior verification enforced by the flow state in Botpress, instead of relying only on instructions to the language model.

Multilateral debt netting for SMEs on Stellar: it finds cycles of debt and settles them atomically, moving only the net balance.

Design and development, in a team of two

• Implemented Nodus’s Soroban contracts in Rust, which cancel a cycle of debts between businesses in a single atomic transaction that moves only the net balance; on testnet, settled a cycle of 20 businesses with 20 passkey signatures.
• In Nodus, each business uses a passkey-controlled smart account with no seed phrase, and a relayer pays the fees so no business needs XLM. Built the app as a TypeScript monorepo with Next.js, PostgreSQL, an event indexer and end-to-end tests.

Rust · Soroban · TypeScript · Next.js · PostgreSQL · Passkeys (WebAuthn)

Open transparency platform for the operational expenses of the Chilean Senate. MVP.

• Designed the Python ETL of Pulso Fiscal so every published datum keeps its official source URL, capture date and the SHA-256 hash of the downloaded resource.
• Built the MVP of Pulso Fiscal, which turns the Chilean Senate’s operational expenses since 2021 into comparable rankings and tables, with versioned Supabase/PostgreSQL migrations and a Next.js frontend. Code under the MIT License, data under CC BY 4.0.

Python · Supabase · PostgreSQL · Next.js

Urban mobility simulator for Santiago that estimates the impact of different scenarios on CO2 and PM2.5. Built at Indies Hack 2026.

Full-stack development, in a team of 4

• At Indies Hack (May 2026), in 54 hours and a team of 4, built Pulso Urbano, a simulator that shows mobility scenarios in Santiago and estimates their impact on CO2 and PM2.5 from real open data.
• In Pulso Urbano, contributed to the frontend, the interactive MapLibre GL map and data integration (DTPM’s GTFS, OCUC cycle lanes, communes and noise), with communes read from Cloudflare D1.

React · TanStack Start · MapLibre GL · Cloudflare Workers · Cloudflare D1 · Drizzle ORM

Password manager with in-browser encryption, built for the Introduction to Modern Cryptography course.

• In the password manager, everything is encrypted in the browser with the Web Crypto API: an AES key derived from the master password with PBKDF2 protects saved passwords and each user’s RSA-OAEP private key, which is used to share passwords between users.
• Documented the password manager’s known limitations: AES-CBC is not authenticated (AES-GCM would be the choice today), 100,000 PBKDF2 iterations is below current OWASP guidance, and the master password also reaches the server at sign-up.

React · FastAPI · SQLModel · Web Crypto API

Double degree program with Computer Engineering: one thesis completes both degrees. Thesis at CLCERT.

Bachelor’s degree in Engineering Sciences, Computer Science major (Licenciatura en Ciencias de la Ingeniería, mención Computación), completed in 2024.

Best University Project (1st place, University Track), Find Your Way Hackathon (Tellus and Stellar), October 2026

With Nodus, a multilateral debt netting platform for SMEs on Stellar, built in a team of two.

CiberLAC 2026 Cybersecurity School, IDB and Red CiberLAC, August 2026

65 hours, August 5 to 14, 2026, in Florianópolis, Brazil. I was one of three CLCERT students selected to represent Universidad de Chile. Courses: MITRE ATT&CK, post-quantum cryptography adoption, blockchain fundamentals and information asset management.