Barak Fatal is a Principal Software Engineer based in Tel Aviv with eight years of experience building secure, production-grade systems across defense and commercial sectors. Now at Palo Alto Networks, he progressed from senior engineer to principal while focusing on cloud security and resilient platform design. His open-source contributions to the widely used Checkov project show hands-on expertise in infrastructure-as-code security, adding Kubernetes privilege-escalation checks and Cloudsplaining IAM rules that improve build-time vulnerability detection. A former IDF software team lead, he combines rigorous backend and full-stack engineering with operational security practices. He holds a BSc in Mathematics and Computer Science from Tel Aviv University and an MA in Behavioural Economics, a blend that informs pragmatic, human-centered technical decisions.
8 years of coding experience
7 years of employment as a software developer
Master of Arts - MA, Behavioural Economics, Master of Arts - MA, Behavioural Economics at Reichman University (IDC Herzliya)
Bachelor of Science - BS, Mathematics and Computer Science, Bachelor of Science - BS, Mathematics and Computer Science at Tel Aviv University
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Role in this project:
DevOps Engineer & Security Engineer
Contributions:523 reviews, 29 commits, 163 PRs in 20 days
Contributions summary:Barak primarily contributed to enhancing the security and build-time checks of the Checkov project. Their work involved adding new checks and policies related to Kubernetes security, particularly focusing on privilege escalation prevention and secure service account configurations. They also introduced and integrated various Cloudsplaining IAM checks for Terraform resources, enhancing the project's ability to identify potential vulnerabilities and misconfigurations within infrastructure-as-code. Furthermore, the user updated existing checks to support the evolving default configurations, such as the new default S3 encryption, and improved test coverage for security-related policies.
Contributions:1 push, 3 branches in 4 years 10 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.