Durham, NC

Open to SWE roles · summer + new-grad ’26

Future-ready engineer

Michael Lei · Duke ECE + CS · May 2028 Building reliable systems at the intersection of AI and data.

Scroll

About

Michael Lei

Michael Lei — I'm passionate about turning hard engineering problems into solutions that work in the real world.

I build reliable systems at the intersection of AI and data, and I care about the parts that have to hold up under real use: correctness, scale, and the infrastructure that keeps software dependable in production.

// AI // Data // Systems

  • ~93% clinician charting time cut
  • 1M+ attacks ingested / day
  • 100+ PRs auto-reviewed
  • 340K+ CVEs ingested & embedded

Experience

Experience & Skills

  1. Forewarned

    May 2026 – Present

    Software Engineer · Durham, NC

    • Architected a threat-intelligence engine for a 90-university honeypot network, distilling ~1M Elasticsearch logs/day into a deduplicated Postgres entity graph that collapses redundant sessions so each distinct threat is enriched once instead of per session.
    • Built a STIX 2.1 projection layer with a custom bounded graph-traversal algorithm that powers exports and interactive threat-graph visualization, plus TAXII 2.1 servers with dynamic collections partners pull straight into their existing SIEMs.
    • Designed fleet-wide zero-day and campaign detection pairing cross-campus prevalence signals with retrieval-augmented triage against known vulnerabilities to flag candidate zero-days and emerging campaigns.
  2. MealMarkOS

    Jan 2026 – Present

    Co-founder & Engineer · Durham, NC

    • Launched a multi-tenant B2B2C wellness platform piloting at 10+ universities, where each school's branded instance serves live campus dining menus, meal and training logging, and a universal AI assistant.
    • Designed the assistant's tool-loading architecture, organizing 100+ MCP tools into namespaces like meals and gym, loading only the active tab's tools, with a load_tools meta-tool to pull others mid-turn, cutting schema payload up to 80%.
    • Provisioned the multi-tenant AWS infrastructure on Terraform-managed ECS Fargate, isolating each university in its own Aurora Postgres schema and cutting new-school onboarding to one CLI transaction.
  3. VSee

    May 2025 – Present

    Software Engineering Intern · Sunnyvale, CA

    • Trained a medical-coding model over 8,000+ ICD codes, deployed in a dockerized clinical AI service that cut physician charting time ~93%.
    • Authored a TypeScript Elasticsearch MCP server that lets non-technical employees query usage and telemetry data in natural language.
    • Built an AI code-review service triggered by Bitbucket webhooks that posts line-cited issues directly on pull requests, running on 100+ production PRs across 3 repos.
  4. Chilkoti Group

    Summer 2025

    Machine Learning Intern · Remote

    • Automated OpenCV preprocessing and circle-detection parameter tuning, cutting manual tuning from 20 to 2 minutes per slide for cancer-screening ML training data.
    • Productionized the lab's Jupyter notebook CV prototype into a deployed React annotation tool, letting researchers label slides interactively without touching code.
  5. Duke University

    Fall 2024

    Software Engineer · Durham, NC

    • Built an off-grid flagpole control system pairing a browser UI with C++ ESP32 firmware over MQTT, automating a manual flag-changing process that consumed hundreds of staff-hours a year.
    • Architected a pure-MQTT control plane where new flagpoles auto-onboard via retained topics and a broadcast topic fans one command across the whole fleet, so adding the Nth device needs zero frontend changes.

Work

Flagship projects

PublicCVE — project preview
Personal

PublicCVE

A public CVE intelligence platform on Postgres + pgvector. 340K+ vulnerabilities in one corpus, natural-language hybrid search exposed to LLMs over MCP, and an attack→CVE RAG pipeline strict enough that a hallucinated CVE ID can't happen.

Hybrid semantic search and an attack→CVE RAG pipeline over 340K+ CVEs in one Postgres + pgvector store. The schema makes a hallucinated CVE ID impossible.

STINGAR Intelligence — project preview
Forewarned

STINGAR Intelligence

Unifying firewall block telemetry across multiple platforms at Duke. AI-driven persistence ranking + coordinated-campaign detection.

30K+ enriched attacks/day into Elasticsearch, false positives cut ~90%, shared across 80+ institutions.

DukeDine — project preview
Duke

DukeDine

A nutrition + workout tracker for Duke students. LLM agents over the dining database. 3 months from grant to 100+ daily users.

Nutrition + workout tracker for Duke students — LLM agents over the dining DB. 100+ daily users.

PypeDeid — project preview
VSee

PypeDeid

A composable de-identification pipeline for clinical notes. Regex + ML + LLM detectors stacked end-to-end, configured as data.

Part of cutting clinician charting from ~15 min to ~1 min (~93%) in a customer demo.

MealMarkOS — project preview
MealMarkOS

MealMarkOS

A multi-tenant B2B2C wellness SaaS that grew out of DukeDine — each university gets its own branded subdomain, an isolated data plane, and a dining adapter on a shared engine, with a MealMark AI assistant reasoning over food, training, and weight data. Piloting at 10+ schools.

A multi-tenant B2B2C wellness SaaS spun out of DukeDine — Duke is the first tenant; piloting at 10+ universities.

Automated Medical Coding — project preview
VSee

Automated Medical Coding

A self-hosted service that predicts ICD/CPT codes from clinical notes and returns token-level evidence spans for every prediction.

Token-level evidence spans over 8,000+ ICD codes. The other half of the ~93% charting-time cut.

FireWatch — project preview
Personal

FireWatch

An iOS + DJI Mavic Pro app that runs a CoreML detector on-device, flagging wildfires and pre-fire hazards in real time.

~95% on-device detection accuracy; U.S. Division Semi-Finalist, 2022 China–US Young Maker Competition.

More

Bench archive

Writing

Mostly about evaluation, privacy, and context.

All writing →

Contact

Let's talk.

Open to SWE roles · summer + new-grad ’26 — graduating May 2028. The fastest way to reach me is email.