Alok Menghrajani
Security Engineer at stealth
San Francisco, California, United States
Summary
🤩
RockstarAlok Menghrajani is a Security Engineer in San Francisco with 11 years of experience building and hardening infrastructure and backend systems at scale. He’s contributed to high-impact open-source security tools—helping Square’s certstrap, Locking down ghostunnel’s TLS proxy, and improving Keywhiz secret-management—bringing pragmatic fixes like CRL handling and localhost-only target restrictions. Previously he helped put the “s” in HTTPS at Facebook and co-authored HackLang, demonstrating deep protocol and language-level security experience. A maker of CTFs, he blends offensive-minded thinking with production-hardened engineering to deliver reliable, auditable systems.
11 years of coding experience
English, French, German
Stackoverflow
3,125reputation
194kreached
15answers
0questions
facebook-graph-api
top-5%
jsonp
top-5%
javascript
top-5%
google-chrome
top-1%
Github Skills (41)
crypto10
tls1210
bootstrap10
testing10
it-security10
bitcoin10
proxy10
bitcoins10
tls1310
java10
cryptocurrency10
security10
javas10
mtls10
google-chrome10
Programming languages (20)
Github contributions (5)
square/subzero
Aug 2018 - Aug 2020
Block's Bitcoin Cold Storage solution.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:30 reviews, 253 commits, 222 PRs in 2 years
Contributions summary:Alok primarily worked on refactoring and renaming core components within the Bitcoin cold storage solution. Their contributions involved renaming "plutus" to "subzero" across various Java files, including action classes for wallet initialization, transaction signing, and finalization. Additionally, the user made changes to remove internal URL references and update build configurations, demonstrating an understanding of the project's architecture and build processes. Further contributions included improvements to amount rendering, which likely involved the user modifying calculations or formatting logic to provide better user experience.
hsmblockchaincoldcold-storagecrypto
square/certstrap
Feb 2016 - Nov 2020
Tools to bootstrap CAs, certificate requests, and signed certificates.
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:1 release, 1 review, 15 commits in 4 years 9 months
Contributions summary:Alok primarily contributed to the project by implementing security features, including the creation of certificate revocation lists (CRLs) and the integration of security best practices. They also focused on improving code quality through bug fixes and applying `go vet` recommendations, and addressing subject ordering issues. Furthermore, the user enhanced the utility of the tool by adding the ability to initialize a CA with an empty CRL file, addressing potential issues with Java applications.
golangcertificate-authoritysslsignedtls
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.