Stephen Shaffer
Principal Security Engineer at FIRST
Bel Air, Maryland, United States
Summary
👤
Senior🎓
Top SchoolStephen Shaffer is a security-focused technology advisor and principal security engineer with eight years of experience applying data engineering, data science, and risk quantification to vulnerability management across healthcare and consumer-tech environments. He has driven program-level security transformations—implementing risk scoring, large-scale data pipelines, and configuration hardening—at organizations including Moderna, Peloton, and CMS cloud programs. As EPSS SIG co-chair he helps shape community practices around exploit prediction, and he combines hands-on tooling, research, and published code with practical compliance delivery. Based in Bel Air, MD, he blends a criminology background with an MS in Cybersecurity to approach risk from both behavioral and technical angles, and he’s known for turning complex security requirements into auditable, data-driven programs.
8 years of coding experience
10 years of employment as a software developer
Master of Science, Cybersecurity, Master of Science, Cybersecurity at University of Maryland Global CampusBachelor of Arts, Criminology and Criminal Justice, Bachelor of Arts, Criminology and Criminal Justice at University of Maryland
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (21)
terraform9
graph9
infrastructure-as-code8
amazon-ec26
docker-container6
amazon4
go3
redhat3
vulnerability-scanners3
docker3
aws3
elastic3
vulnerability3
linux3
windows3
Programming languages (4)
Github contributions (5)
t0sche/cvss-bt
Nov 2023 - May 2025
Enriching the NVD CVSS scores to include Temporal & Threat Metrics
Contributions:1 release, 1 review, 36 PRs in 1 year 6 months
samtekinc/CIS-hardening-macOS-BigSur
Jun 2021 - Oct 2021
Contributions:22 commits in 3 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.