Kurt Boberg
Staff Security Researcher at r2c
United States
Summary
🤩
Rockstar🎓
Top SchoolKurt Boberg is a Staff Security Researcher with a focused track record in secure code review, open-source vulnerability discovery, and automating security processes, currently advancing Semgrep's detection capabilities at r2c. He has responsibly disclosed multiple notable CVEs involving deserialization and XML external entity issues across popular projects like Jenkins, Apache PDFBox, and YamlDotNet, demonstrating hands-on exploit-to-patch expertise. Prior roles at Chegg and DocuSign saw him grow from software engineer into lead application security positions, blending development fluency with threat modeling and remediation. An active contributor to the semgrep-rules community and tools like ysoserial.net, he improves rule accuracy across many languages to prevent injection and deserialization flaws at scale. With an MS in Computational Science and a BA in Mathematics, he pairs rigorous analytical training with practical offensive and defensive security research.
4 years of coding experience
8 years of employment as a software developer
Bachelor of Arts (B.A.), Mathematics, Bachelor of Arts (B.A.), Mathematics at University of WashingtonMaster of Science (M.S.), Computational Science, Master of Science (M.S.), Computational Science at Central Washington University
Github Skills (16)
static-analysis10
semgrep10
security10
csharp9
java9
dotnet-core9
python9
ruby9
php9
javascript9
javas9
regex8
ruby-rails7
rails7
docker4
Programming languages (13)
Github contributions (5)
kurt-r2c/pdfbox
Oct 2022 - Jul 2024
Mirror of Apache PDFBox
Contributions:1 PR, 1 push, 1 branch in 1 year 9 months
pdfapache-pdfboxxmlapachepdfbox
kurt-r2c/cli
Feb 2023 - Jan 2024
the package manager for JavaScript
Contributions:4 PRs, 2 pushes in 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.