Devin Kinch
Burnaby, British Columbia, Canada
Summary
👤
Senior🎓
Top SchoolDevin Kinch is a Senior Application Security Engineer with 14 years of experience securing cloud-native SaaS and enterprise systems, currently focused on application and infrastructure protection at Caseware in Burnaby, BC. He combines deep offensive research skills—evidenced by vulnerability discovery and exploit work such as contributions to the MouseJack exploit project—with practical DevSecOps delivery, including AWS firewall rules and CI/CD-integrated security tooling. Across roles at Sophos, Zenefits, Hootsuite and others he has built fuzzing frameworks, semgrep signatures, serverless security controls, and automated scanning that reduced whole classes of bugs from production. Devin pairs hands-on penetration and incident response experience with architecture-level thinking, producing network diagrams, security policies, and onboarding docs to communicate risk effectively. Certified across GIAC, AWS and Cisco tracks, he bridges networking, cloud and application security in ways that help teams move fast without breaking things. A background in network engineering gives him an uncommon ability to trace problems from low-level protocols up through application logic.
14 years of coding experience
15 years of employment as a software developer
CCIE, CCIP, CCNP, CCNA, CCIE, CCIP, CCNP, CCNA at Cisco Professional CertificationAWS Certified Solutions Architect, AWS Certified Developer, AWS Certified Solutions Architect, AWS Certified Developer at AWS CertificationGWAPT, GWAPT at GIAC
Github Skills (10)
it-security10
wireless10
embedded10
exploit10
telecommunication10
reverse-engineering10
communications10
sys10
python10
security10
Programming languages (4)
Github contributions (5)
insecurityofthings/jackit
Jul 2016 - Jul 2017
JackIt - Exploit Code for Mousejack
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:98 commits, 52 pushes, 23 comments in 1 year
Contributions summary:Devin refactored and improved code related to the `hid.py`, `attack.py`, and `scanner.py` files, indicating a focus on the core functionality of the MouseJack exploit. They added a `lib` directory, suggesting the creation of reusable components. They also addressed handling of non-encrypted payloads, suggesting a deeper understanding of the exploit's target devices. This includes features such as keylogging and support for Amazon and Logitech devices.
exploit
insecurityofthings/uC_mousejack
Sep 2016 - Aug 2017
Mousejack for ATmega32u4
Contributions:8 commits, 1 PR, 7 pushes in 11 months
nrf52840mousejackarduinombedatmega32u4
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.