Abhishek Arya
Director Of Engineering, Google Open Source Security Team
San Francisco Bay Area United States
Summary
🤩
RockstarAbhishek Arya is a seasoned engineering leader with 16 years of experience driving large-scale security and fuzzing initiatives at Google, now serving as Director of Engineering for the Google Open Source Security Team in the San Francisco Bay Area. He leads development of widely used OSS security tooling—including OSS-Fuzz, ClusterFuzz, FuzzBench and Scorecard—whose platforms have collectively discovered tens of thousands of bugs and hardened hundreds of projects. A pragmatic hands-on manager, he has deep expertise in backend, DevOps and CI/CD automation, frequently contributing fixes to build systems, Dockerfiles, and fuzzing APIs to improve reliability and scalability. His work bridges research and production: launching the industry’s first fuzzer benchmarking-as-a-service and integrating supply-chain integrity efforts like Sigstore and SLSA into practical engineering workflows. Known for improving build/test infrastructure and API rate-limiting robustness, he blends strategic program leadership with frequent code-level contributions to critical open-source projects.
16 years of coding experience
3 years of employment as a software developer
Github Skills (32)
github-ci10
benchmark10
docker10
python10
apidoc10
scripting10
benchmarking10
google-app-engine10
travis-ci10
circleci10
dockers10
cicd10
script10
api10
github-api10
Programming languages (15)
Github contributions (5)
ossf/criticality_score
Nov 2020 - May 2022
Gives criticality score for an open source project
Role in this project:
Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:5 releases, 63 reviews, 131 commits in 1 year 6 months
Contributions summary:Abhishek primarily contributed to the core functionality of the `criticality_score` project, enhancing the calculation of criticality scores by incorporating additional parameters and improving robustness. They also implemented a rate-limiting mechanism using GitHub's API, ensuring the application respects API usage limits. Furthermore, the user updated the build process via setup.py to ensure the project is packaged properly. They also improved the speed and stability of the generation script.
open-source-projectcriticality
google/clusterfuzz
Jan 2019 - Aug 2021
Scalable fuzzing infrastructure.
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:10 releases, 256 reviews, 667 commits in 2 years 7 months
Contributions summary:Abhishek's contributions primarily involved fixing issues related to the deployment of applications, specifically focusing on addressing exceptions in the App Engine environment. They implemented code changes to address specific exceptions within the application deployment process. Furthermore, the user made modifications to the system's temporary directory management, enhancing task cleanup operations. The user also contributed to the system's utility scripts.
fuzzingsecuritystabilityvulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.