Roland Hojda

Frontend & Software Engineer
Arad, Romania — Remote / Hybrid
Open to work
$ whoami
roland_hojda — building interfaces since 14, breaking my own security assumptions since 2025
 
$ cat current_focus.txt
GymCrew (Flutter) · SkillSwap (Next.js) · security certifications · NTT DATA
 
// 14/14 certifications verified — see below
01 — About

I started writing code at 14, hosting Minecraft and Unturned servers and scripting the plugins that ran them. That habit of taking something apart to see how it works never really left — it just moved from game servers to production auth flows.

Today I work as a Senior Help Desk Analyst at NTT DATA while finishing a Computer Science degree at Universitatea „Aurel Vlaicu" din Arad, and I build my own products on the side — GymCrew, a social fitness app, and SkillSwap, a marketplace for trading skills instead of money. Alongside the dev work, I've been stacking security credentials — ISC2 Candidate, TryHackMe, Cisco, several applied-security courses — because I'd rather find the exploit in my own app than have someone else find it first.

I'm fluent in Romanian, German and English, and comfortable documenting and shipping work in any of the three.

02 — Experience

Where I've worked

Oct 2024 —
Present
Senior Help Desk Analyst
NTT DATA · Remote, Romania
Active Directory Microsoft Azure +7 more skills
Jan 2023 —
May 2023
Web Developer
RoviSpeditions · Arad, Romania · On-site
Developed and hosted a website for RoviSpeditions, a logistics business.
HTML5 CSS +4 more skills
Sep 2023 —
May 2025
B.Sc. Computer Science
Universitatea „Aurel Vlaicu" din Arad
HTML5 SQL +2 more skills
03 — Projects

Things I've built

Two products currently in progress, and two teenage server projects that taught me most of what I still use today.

GymCrew

Jun — Aug 2026
Android app

A fitness app for people who train better together. Most fitness apps track you — GymCrew tracks your crew, because consistency is easier when your gym friends can see your streak and call you out when it slips.

  • Verified streaks: check-ins confirmed by the gym's QR code or GPS, so a streak means you actually showed up
  • Nutrition tracking by manual entry, nutrition-label OCR, or barcode scan for real product data
  • AI Coach: pick muscle groups and available time, get a workout weighted by your own lifting history
  • Groups, chat, leaderboards, challenges, and a feed where workouts post as shareable cards
Flutter · Riverpod · Supabase · Dart, SQL, TypeScript

SkillSwap

May 2026 — Present
Web marketplace

Shipping in September: a marketplace where people trade skills instead of money. You teach guitar, someone teaches you pasta — no course fees. It includes listings, a filterable marketplace with best-match sorting, swap requests with daily limits, realtime private chat, two-way ratings, a leaderboard, and Stripe Checkout for Premium with a signature-verified webhook.

Field note — a plan limit that wasn't Every plan limit lives in Postgres, in trigger functions and row-level security, not in a disabled button. That paid off during the final audit: the "update your own profile" policy was row-level, not column-level, so a free user could have PATCHed their own row to plan: premium and unlocked every paid feature. Confirmed it was exploitable, then closed it with a trigger — the Stripe webhook still writes that field, but only as the service role. Free tiers should be honest, not just inconvenient to bypass.
Next.js 14 · TypeScript · Tailwind · Supabase (Postgres, Auth, Realtime, RLS) · PL/pgSQL · Stripe · Vercel

Origins

Before either of those, there were two self-hosted game servers and a lot of trial and error.

Unturned Server Hosting + Plugin Coding

Jun 2017 — Jun 2018

Hosted an Unturned server, XtremeZone Romania, and coded plugins including /vault — a system letting players safely store items before logging out, accessible only to them, with auto-save on login.

C#

Minecraft Factions Plugin Scripting

Jan — Feb 2018

Created and hosted a Minecraft Factions server with its own ranks, player economy, and preset kits. Coded plugins in Java, including /heal on a 120-second cooldown, compiled to .jar and loaded straight into the server.

Java · Bukkit API
04 — Skills

What I work with

Frontend & mobile

  • React & Redux
  • JavaScript
  • HTML5 / CSS
  • AngularJS
  • Flutter (Dart)

Backend & data

  • TypeScript / Node
  • SQL & PL/pgSQL
  • Supabase (Postgres, RLS)
  • C# / Java
  • Microsoft Azure

Security

  • Active Directory
  • Applied ethical hacking
  • Cyber resilience & risk
  • Critical infrastructure protection
  • NIS2 & compliance basics
05 — Certifications

Credentials

Fourteen certifications across security, cloud and frontend engineering — most earned in the past year alongside full-time work.

ISC2 Candidate
ISC2 · Issued Feb 2026 · Expires Feb 2036
Pre Security (SEC0)
TryHackMe · Issued Aug 2026
Introduction to Cybersecurity
Cisco Networking Academy · Issued Aug 2026
ICIP — Critical Infrastructure Protection
OPSWAT Academy · Issued Mar 2026 · Expires Feb 2036
Frontend Development — React
HackerRank · Issued Mar 2026 · Expires Jan 2036
Angular Course
HackerRank · Issued Mar 2026 · Expires Jan 2036
Data Navigator Badge
LeetCode · Issued Jan 2026
NIS2 Directive Cybersecurity Laws & Regulations
Codecademy · Issued Jan 2026
Fundamentals of Cyber Resilience & Risk Management
Codecademy · Issued Feb 2025
Front-End Engineer Career Path
Codecademy · Issued Feb 2025
Defending Against AI-Generated Attacks
Codecademy · Issued Feb 2025
Cybersecurity for Business
Codecademy · Issued Feb 2025
Introduction to Ethical Hacking
Codecademy · Issued Feb 2025
Becoming a Secure Coder / Unit Testing with Gen AI
Codecademy · Issued Feb 2025
06 — Recommendation

"It is my genuine pleasure to recommend Roland for a position in cyber security, resilience, or as a front-end engineer. As his former trainer and quality coach, I closely observed both his technical growth and his professional mindset — Roland demonstrated a strong command of HTML, CSS, JavaScript, React and Redux, and applied them creatively rather than just theoretically. He tackles problems methodically, breaking them into manageable parts and exploring multiple pathways before converging on the most efficient option. His calm, solution-oriented approach made him a trusted peer among his fellow trainees."

Mihnea Georgescu — Project Manager @ Genpact · Roland's former trainer and quality coach