Worked on security hardening within the apache/kafka repository, focusing on mitigating deserialization vulnerabilities in SafeObjectInputStream. Addressed a known issue by implementing an allowlist-based deserialization model in Java, introducing a constructor that permits only approved classes and restricting default deserialization to essential base types required by FileOffsetBackingStore. This approach prevents the deserialization of potentially malicious classes, directly enhancing the security posture of the codebase. Leveraged expertise in API design, Java development, and security to deliver a targeted bug fix rather than new features, demonstrating a methodical approach to addressing critical vulnerabilities in a widely used distributed systems platform.