Michael Stepankin
Staff Security Engineer at Google
London, England, Switzerland
Summary
🤩
Rockstar🎓
Top SchoolMichael Stepankin is a Staff Security Engineer with seven years of focused experience in application and research-driven security across industry leaders. He has advanced from application security roles at JPMorgan Chase to principal and research positions at Veracode, PortSwigger, GitHub, and now Google, blending offensive research with product-oriented defenses. Michael specializes in translating deep vulnerability research into practical mitigation strategies and secure development practices for large-scale platforms. Based in London with ties to Switzerland, he brings a global perspective to threat modeling and red-team-style discovery in complex enterprise environments. Notably, his career path shows a consistent shift from consultancy-style testing to embedding security within developer workflows and platform teams. He holds a bachelor’s in Computer and Information Systems Security from Bauman MSTU and is known for bridging technical rigor with actionable engineering outcomes.
7 years of coding experience
9 years of employment as a software developer
Bachelor's degree, Computer and Information Systems Security/Information Assurance, Bachelor's degree, Computer and Information Systems Security/Information Assurance at Bauman Moscow State Technical University
English, Russian
Github Skills (66)
gadget10
jndi10
pentest10
vulnerability10
exploit10
solr9
security9
deserialization9
poc9
sku9
hacking9
ldap9
spring-boot8
serialization8
java8
Programming languages (5)
Github contributions (5)
artsploit/ysoserial
Nov 2019 - May 2024
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Contributions:4 pushes, 1 branch in 4 years 7 months
deserializationexploitjava
veracode-research/rogue-jndi
Nov 2019 - Sep 2020
A malicious LDAP server for JNDI injection attacks
Contributions:6 commits, 3 PRs, 3 pushes in 10 months
jndildap
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.