Aleg Vilinski
Head Of Product Security at Festo
Stuttgart, Baden-Württemberg, Germany
Summary
🤩
Rockstar🎓
Top SchoolAleg Vilinski is Head of Product Security at Festo with six years of hands-on experience building PSIRT capabilities, driving SBOM and CSAF adoption, and scaling security testing teams across geographies. He combines technical leadership—having led PSIRT operations and contributed backend code to prominent DevSecOps tooling like DefectDojo—with strategic program delivery that balances regulatory demands and business enablement. Aleg led the open-source SBOM project at Festo, advancing automation and industry best practices, and has practical experience hardening authentication and API features in vulnerability management platforms. With a background in technical cybernetics (MSc) and engineering, he brings a data-driven approach to incident response and tooling automation, plus a teaching stint in university mathematics that underscores his ability to explain complex concepts clearly.
6 years of coding experience
5 years of employment as a software developer
Master of Science - MS, Technische Kybernetik, 2.0, Master of Science - MS, Technische Kybernetik, 2.0 at Universität StuttgartBachelor of Engineering - BE, Technische Informatik, 1.8, Bachelor of Engineering - BE, Technische Informatik, 1.8 at Hochschule Esslingen - University of Applied Sciences
Github Skills (11)
vulnerability-management10
api10
python10
apidoc10
django10
saml10
security10
devsecops9
automation9
automations9
sql7
Programming languages (7)
Github contributions (5)
DefectDojo/django-DefectDojo
Apr 2022 - Dec 2022
DevSecOps, ASPM, Vulnerability Management. All on one platform.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:8 reviews, 18 commits, 18 PRs in 8 months
Contributions summary:Aleg primarily contributed to the DefectDojo project by implementing and modifying back-end features, specifically focusing on the application's settings, filtering capabilities, and API functionalities. They added features like filtering findings by status, enhancing the API to include engagement end-dates and closing findings by status. Furthermore, the user addressed security aspects, such as SAML2 authentication, and improved the generic parser's description.
pythondjangovulnerability-managementbugbountydefectdojo
Festo-se/cyclonedx-editor-validator
Jun 2023 - Mar 2025
Tool for creating, modifying and validating CycloneDX SBOMs.
Contributions:49 releases, 264 reviews, 289 PRs in 1 year 9 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.