Carl Petty
Distinguished Engineer at Arctic Wolf
Denver, Colorado, United States
Summary
🤩
RockstarCarl Petty is a Distinguished Engineer based in Denver with a six-year formal experience designation and a long track record of senior security engineering roles across Arctic Wolf, Microsoft, Red Canary, and ManTech. He specializes in offensive and defensive cybersecurity engineering, reverse engineering, Windows internals, and CNO development, regularly translating deep technical research into practical detection and mitigation tools. At Red Canary and via contributions to the widely used atomic-red-team repo he has authored and adapted MITRE ATT&CK–aligned detection tests in PowerShell, C, Ruby and batch—bridging adversary emulation with operational detection. Carl combines hands-on kernel and user-mode work with cryptography and data modeling, enabling end-to-end secure systems from low-level exploit analysis to deployed detection logic. Known for moving between research and product, he excels at turning complex vulnerability research into auditable, deployable defenses. Based in the U.S., he brings both government and commercial security experience that surfaces subtle trade-offs between detection fidelity and operational safety.
6 years of coding experience
15 years of employment as a software developer
English
Github Skills (11)
cybersecurity10
powershell10
mitre-attack10
att10
batchfile9
script9
batch9
c178
vbscript8
c118
ruby7
Programming languages (3)
Github contributions (5)
redcanaryco/atomic-red-team
Oct 2020 - Jan 2022
Small and highly portable detection tests based on MITRE's ATT&CK.
Role in this project:
Security Engineer
Security EngineerContributions:66 reviews, 94 commits, 40 PRs in 1 year 3 months
Contributions summary:Carl's commits primarily involve modifications to files related to "atomics" within the repository, which are detection tests based on MITRE ATT&CK. The changes include the addition and modification of files, including PowerShell scripts (.ps1), batch files (.bat), C code, and Ruby scripts. These changes appear geared towards creating or adapting tests that align with the MITRE ATT&CK framework, indicating a focus on offensive and defensive cybersecurity techniques.
mitremitre-attackportable
redcanaryco/chain-reactor
Jan 2020 - Jun 2020
Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
Contributions:3 reviews, 3 commits, 12 PRs in 4 months
behaviorstechniquesadversaryseccompsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.