Alex Rebert
Senior Staff Software Engineer at Google
Pittsburgh, Pennsylvania, United States
Summary
👤
Senior🎓
Top SchoolAlex Rebert is a Principal Software Engineer with 16 years of experience who leads Google's memory safety program and champions the adoption of Rust and Secure-by-Design practices across large C++ codebases. A former founder and technical lead of ForAllSecure (Mayhem), he architected one of the first autonomous security bots that won the DARPA Cyber Grand Challenge and helped scale the company to a seven-figure ARR before exit. His background blends deep research—developing Veritesting at Carnegie Mellon that found tens of thousands of bugs—with hands-on systems engineering, from distributed fuzzing infrastructure on GKE to Rust-based API fuzzers integrated with GitHub. Alex’s open-source contributions include security-driven fixes to high-profile projects like assimp and libucl, where he addressed out-of-bounds and integer overflow bugs uncovered by OSS-Fuzz. Based in Pittsburgh, he pairs startup grit with enterprise influence, uniquely able to move breakthrough research into production at warehouse scale.
15 years of coding experience
10 years of employment as a software developer
BS Computer Science, BS Computer Science at EPFLMaster’s Degree Electrical and Computer Engineering, Master’s Degree Electrical and Computer Engineering at Carnegie Mellon University
Github Skills (16)
c1710
memory-management10
debug10
c-language10
vulnerabilities10
cprogramming-language10
c1110
security10
text-parsing9
asset-pipeline9
parsing9
cplus7
fuzzer7
fuzz-testing7
fuzzing7
Programming languages (13)
Github contributions (5)
vstakhov/libucl
Jan 2022 - Jan 2022
Universal configuration library parser
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1 review, 10 commits, 1 PR in 2 days
Contributions summary:Alex primarily focused on fixing out-of-bounds read vulnerabilities within the `libucl` configuration library. Their contributions involved addressing several issues reported by OSS-Fuzz, focusing on areas such as JSON string parsing, multiline value handling, variable expansion, and string manipulation. They identified and corrected issues by adding bounds checks and improving code logic to prevent memory access errors. These fixes improve the library's stability and security.
configurationparser-libraryconfigparserconfiguration-library
assimp/assimp
Oct 2021 - Jan 2022
The official Open-Asset-Importer-Library Repository. Loads 40+ 3D-file-formats into one unified and clean data structure.
Role in this project:Software Engineer (Focus on Bug Fixing & Code Quality)
Software Engineer (Focus on Bug Fixing & Code Quality)Contributions:12 commits, 2 PRs, 2 comments in 2 months
Contributions summary:Alex primarily focused on identifying and resolving various out-of-bounds read/write vulnerabilities and integer overflow issues within the Assimp library. Their contributions involved modifying multiple files to address security concerns, ensuring the stability and reliability of the software. They demonstrated expertise in C++ by applying these fixes, which were driven by reports from fuzzing tools like OSS-Fuzz, indicating a strong focus on code quality and security. The work involved understanding and rectifying memory management problems within the asset importing process.
pythonc-plus-plusobjective-cvolume-renderingfbx-exporter
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.