Aaron Loo
Staff Security Software Engineer at Aurora
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolAaron Loo is a Staff Security Software Engineer in San Francisco with 11 years of experience building measurable, scalable security across consumer and embedded systems. He has led application security teams and engineered quantitative risk models at Airbnb, managed hiring and process scaling at Yelp, and now helps secure autonomous vehicles at Aurora by embedding ZTA, hardware-backed device attestation, and process-level identity into complex PKI hierarchies. A hands-on coder and manager, Aaron contributes to open-source tooling such as Yelp/detect-secrets, improving secret scanning, benchmarks, and multi-repo support to prevent leaks at scale. He combines a dual technical/business education from Michigan with military leadership experience, which shows in his pragmatic approach to crisis management, team building, and clear communication across legal, audit and engineering stakeholders. Professionally paranoid by design, he focuses on turning fuzzy security metrics into actionable, auditable infrastructure that developers can adopt.
11 years of coding experience
6 years of employment as a software developer
Bachelor of Engineering (BE), Computer Science, Bachelor of Engineering (BE), Computer Science at University of MichiganBachelor of Business Administration (BBA), Business Administration and Management, General, Bachelor of Business Administration (BBA), Business Administration and Management, General at University of Michigan - Stephen M. Ross School of Business
English
Stackoverflow
1reputation
149reached
0answers
1question
Github Skills (8)
git10
python10
security10
testing9
benchmarking9
benchmark9
user-control6
designmode6
Programming languages (8)
Github contributions (5)
Yelp/detect-secrets
Feb 2018 - Apr 2021
An enterprise friendly way of detecting and preventing secrets in code.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1 release, 128 reviews, 125 commits in 3 years 2 months
Contributions summary:Aaron focused on refactoring and enhancing the core functionality of the `detect-secrets` repository. Their contributions included restructuring code snippets, handling Unicode strings, and improving benchmark scripts by adding JSON output, the ability to choose plugins, and timeout functionality. Further improvements involved adding baseline functionality and performance tests to the benchmark script. The user also added features to support scanning multiple git repositories and implemented changes related to verifiable secrets.
secrets-detectionsecuritysecretsyelpdetecting
domanchi/gibberish-detector
Nov 2020 - Feb 2022
Train a model, and detect gibberish strings with it.
Contributions:1 review, 21 commits, 3 PRs in 1 year 3 months
stringsmachine-learningdetectgibberishtrain
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.