Chang Liu
Greater Seattle Area United States
Summary
🤩
Rockstar🎓
Top SchoolChang Liu is a software engineer at AWS with a decade of hands-on experience building secure back-end systems and a perfect 4.0 master's in Data Science from USC. He has made notable open-source security contributions to the OpenSearch project, hardening authentication, password handling, multitenancy, and SSL certificate workflows for a widely used search and analytics platform. Comfortable bridging research and production, he previously taught and produced courses at top universities, translating complex concepts into practical tooling and curricula. Based in Los Angeles, he blends deep security engineering expertise with data-driven product thinking and a strong ECE foundation from Shanghai Jiao Tong University. Colleagues rely on him for pragmatic, audit-ready solutions that reduce attack surface while maintaining operational flexibility. An underappreciated strength is his knack for refactoring legacy security code to align with modern APIs and multitenant architectures.
10 years of coding experience
6 years of employment as a software developer
Master's degree, Data Science, Master's degree, Data Science at University of Southern CaliforniaBachelor's degree, ECE, Bachelor's degree, ECE at UM-SJTU Joint Institute, Shanghai Jiao Tong UniversityBachelor's degree, ECE, Bachelor's degree, ECE at Shanghai Jiao Tong University
Github Skills (20)
opensearch10
javascript10
ssl10
back-end-development10
authentication10
user-authentication10
multitenancy10
java10
security10
javas10
rest-api10
backend10
apidoc9
typescript9
authorizations9
Programming languages (7)
Github contributions (5)
opensearch-project/security-dashboards-plugin
May 2021 - Dec 2022
🔐 Manage your internal users, roles, access control, and audit logs from OpenSearch Dashboards
Role in this project:
Back-end Developer / Security Engineer
Back-end Developer / Security EngineerContributions:1 release, 266 reviews, 47 commits in 1 year 6 months
Contributions summary:Chang's primary contributions focused on enhancing the security of the OpenSearch Dashboards plugin. Their work involved enforcing authentication on specific API routes, ensuring secure access to sensitive resources. They also modified the codebase to extract security-related parameters from URLs and refactored the saved object's client to adhere to multitenancy requirements. Furthermore, the user ensured proper configuration and security of the tenant index template.
access-controlopensearch-dashboardsopensearchopensearch-pluginsopensearch-document
opensearch-project/security
Jul 2020 - Sep 2022
🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit logging as well as role-based access control on indices, documents, and fields
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:5 releases, 763 reviews, 154 commits in 2 years 1 month
Contributions summary:Chang primarily contributed to the security features of the OpenSearch project. Their work involved fixing issues related to password handling, specifically addressing vulnerabilities related to empty passwords. Additionally, they implemented security enhancements, such as rejecting empty passwords during user creation, validating credentials, and catching exceptions related to invalid index names. The user also refactored code related to SSL and certificate handling, specifically related to the new API for getting SSL certificate information.
audit-loggingauthenticationdata-maskingrole-based-access-control
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.