Aya Jbara
Senior Software Engineer at Palo Alto Networks
Tel-Aviv, Tel-Aviv District, Israel
Summary
🤩
Rockstar🎓
Top SchoolAya Jbara is a Senior Software Engineer based in Tel Aviv with four years of hands-on experience building secure, cloud-focused backend systems. She has progressed rapidly through roles at Check Point and Palo Alto Networks, where she advanced from Software Developer to Staff and now Senior Software Engineer. Aya contributes to notable open-source security tooling like Bridgecrew's Checkov, authoring and testing checks that detect IaC and cloud misconfigurations such as unrestricted ingress and logging gaps in managed workflows. Her work demonstrates a strong emphasis on shifting security left—catching vulnerabilities at build time rather than in production. A Hebrew University computer science graduate, she combines academic foundations with practical experience securing large-scale cloud environments. Colleagues value her for producing measurable risk reduction through targeted, high-impact security checks.
4 years of coding experience
5 years of employment as a software developer
Bachelor of Science - BS Computer Science, Bachelor of Science - BS Computer Science at The Hebrew University of Jerusalem
Arabic, Hebrew, English
Github Skills (15)
unit-testing10
terraformer10
infrastructure-as-code10
static-analysis10
cloud-security10
unit-test10
aac10
terraform10
python10
testing10
occi8
api-design7
apim7
api7
aws6
Programming languages (3)
Github contributions (5)
bridgecrewio/checkov
Mar 2022 - Jan 2023
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Role in this project:
Backend & Security Engineer
Backend & Security EngineerContributions:167 reviews, 150 commits, 78 PRs in 9 months
Contributions summary:Aya primarily contributed to the development and testing of security checks within the Checkov framework, specifically focusing on infrastructure as code (IaC) and cloud security configurations. Their work involved creating new checks to identify vulnerabilities and misconfigurations, such as ensuring scheduler logs are enabled in MWAA environments and identifying unrestricted ingress access in OCI security lists. They also implemented and tested several new security checks, including checks related to security definitions and security requirements. The user's contributions demonstrate a focus on improving the security posture of cloud infrastructure by identifying and mitigating potential risks during build time.
gcppolicy-as-codecomplianceaws-securityaws
ayajbara/terragoat1
May 2022 - Jan 2025
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.
Contributions:13 PRs, 4 pushes, 5 branches in 2 years 7 months
vulnerablebridgecrewinfrastructuretrainingcloud-environments
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.