Carter Jones

Senior Principal Product Security Researcher at Palo Alto Networks

United States
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

👤
Senior
🎓
Top School
Carter Jones is a Senior Principal Product Security Researcher with 14 years of hands-on experience across product security, infrastructure engineering, and vulnerability discovery, currently driving security research at Palo Alto Networks. He blends deep technical fluency in languages like Go and Python, cloud infrastructure (AWS, Terraform), and both offensive and defensive tooling to translate complex vulnerabilities into clear remediation paths and verified fixes. Carter has led PSIRT teams, published high-profile advisories, and built automation and IaC to replace brittle tribal systems—improving throughput so engineers can focus on shipping secure products. His background includes securing healthcare, financial, and defense-related systems, and he’s equally comfortable writing exploit PoCs as he is re-architecting CI/CD and AWS deployments for least-privilege. An active contributor to open-source (notably robustness improvements to a Go Binance SDK), he favors pragmatic automation that eliminates repetitive pain points. Known for mentoring teams and documenting hidden processes, he quietly turns chaos into scalable, auditable security practices.
code14 years of coding experience
job13 years of employment as a software developer
bookUniversity of California, Irvine
github-logo-circle

Github Skills (11)

binance10
error-handling10
websocket10
go10
api10
sdk10
testing9
golang9
exchange8
bitcoins7
bitcoin7

Programming languages (9)

HCLC#DockerfileShellSCSSJavaScriptGoPHP

Github contributions (5)

github-logo-circle
ccxt/go-binance

Feb 2018 - Feb 2018

A Go SDK for Binance API
Role in this project:
userBack-end Developer
Contributions:6 commits, 4 PRs in 1 day
Contributions summary:Carter implemented error handling and added error callbacks in several websocket service functions. They modified existing code in `websocket_service.go` and `websocket.go` to include error handling. Additionally, the user updated dependencies, improving the code quality by avoiding naked returns and adding missing error checks, while also addressing a regression issue in `ticker_service.go`. This suggests a focus on improving the robustness and reliability of the Go SDK for Binance API.
golangapiapi-clientexchangebinance-api
carterjones/nix-config

Nov 2011 - Feb 2023

my personal *nix system configuration utility
Contributions:773 commits, 71 PRs, 1373 pushes in 11 years 5 months
zshnix-flakenixos-configurationtmuxnix-darwin
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial