I work on network security detection and analysis. My notable works are:

dnsmonster: a passive DNS monitoring tool
gopacket: a maintained fork of google/gopacket
tcpshark: a process-aware tcpdump
sniproxy: a SNI proxy with embedded DNS client
dnspot: an E2EE dns tunneling framework