Ameen Maali

Security Engineer at Self-Employed

San Francisco Bay Area United States
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

👤
Senior
🎓
Top School
Ameen Maali is a Security Engineer based in the San Francisco Bay Area with nine years of experience defending product and infrastructure at scale. He combines hands-on vulnerability research—ranked in the top 200 on HackerOne with 300+ valid reports across XSS, RCE, SSRF, IDOR and account takeover classes—with product security roles at LinkedIn and a fintech startup. His background spans application and infrastructure security, bug bounty program management, security automation, and compliance work (PCI/ISO/SOC), reflecting both offensive and defensive expertise. Ameen has built internal tooling and performed red-team style assessments to harden CI/CD, AWS, and web platforms. He brings a practical, researcher-first mindset to product security, frequently translating exploit findings into actionable engineering fixes and automation. Outside corporate roles he maintains an active independent practice that continuously sharpens his adversary thinking and novel attack techniques.
code9 years of coding experience
job11 years of employment as a software developer
bookInformatics, Informatics at Indiana University Bloomington
github-logo-circle

Github Skills (34)

querystring10
url-parser10
infosec9
penetration-testing9
bottle9
security9
django9
hacking9
aws-lambda9
vulnerability-detection9
lambda9
pyramid9
flask9
vulnerabilities9
cpp9

Programming languages (4)

TypeScriptC++GoPython

Github contributions (5)

github-logo-circle
ameenmaali/qsfuzz

Mar 2020 - Jan 2021

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
Contributions:1 release, 33 commits, 1 PR in 10 months
querystringvulnerabilitiesfuzzbugbountyinfosec
This repository contains public GPG keys generated for Tradeshift users.
Contributions:60 pushes in 2 years 2 months
gpg-keysgpgtradeshiftkeys
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial