Adam Thigpen
Staff Application Security Engineer
Atlanta Metropolitan Area United States
Summary
👤
Senior🎓
Top SchoolAdam Thigpen is a Staff Application Security Engineer with a decade of experience building automation, tooling, and security programs that help developers ship more secure software. He’s led application security efforts at scale—from founding a program at Focus Brands to rolling out GitHub Advanced Security across 10,000+ repositories and resolving tens of thousands of secret findings. Adam blends hands-on engineering (including fine-grained CodeQL contributions addressing decompression and path-traversal issues) with program-level work like threat modeling, SAST/SCA automation, and vendor-led pen testing. Based in Atlanta, he pairs an MS in Cybersecurity with deep test automation roots from his early Mailchimp work, and he brings a pragmatic focus on developer-friendly processes that prevent vulnerabilities before they reach production.
10 years of coding experience
11 years of employment as a software developer
Master of Science - MS Cybersecurity - Information Security, Master of Science - MS Cybersecurity - Information Security at Georgia Institute of Technology
English, French
Github Skills (5)
ruby10
it-security10
codeql10
security10
sql-injection9
Programming languages (2)
Github contributions (5)
github/codeql
May 2022 - Oct 2022
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:15 reviews, 134 commits, 8 PRs in 5 months
Contributions summary:Adam's contributions focused on enhancing the security aspects of the CodeQL repository, particularly addressing potential vulnerabilities in decompression and archive APIs. They added and refined test cases related to decompression vulnerabilities and path traversal issues in archive APIs. Additionally, the user's commits included refactoring tests related to HTTP verb usage and introducing weak parameter handling detection.
github-advanced-securitysecurity-toolsgithub-security-labsecurity-researcherssecurity
thiggy1342/codeql
May 2022 - Oct 2022
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise
Contributions:2 PRs, 113 pushes, 5 branches in 4 months
enterprisegithub-advanced-securitysecurity-toolslgtmsecurity-researchers
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.