Chris Cornutt
Staff Application Security Engineer
Whitefish, Montana, United States
Summary
🤩
Rockstar🎓
Top SchoolChris Cornutt is a Staff Application Security Engineer with 16 years of hands-on web and application security experience, blending a deep PHP/web-development pedigree with product security leadership at companies like GitHub and Shopify. He builds secure systems and scalable programs—spanning code review, threat modeling, security education, and program-level planning—while also authoring developer resources such as PHPDeveloper.org and the php.ini scanner iniscan. Chris has a proven track record of translating developer-friendly security practices into measurable organizational outcomes, having led security education initiatives at Cisco and guided Product Security planning at GitHub. Based in Whitefish, Montana, he pairs pragmatic engineering with community impact—speaking at major conferences, contributing to open source projects like Joind.in, and running Websec.io to help developers adopt more security-conscious workflows.
16 years of coding experience
26 years of employment as a software developer
BA Graphic Design/Advertising, BA Graphic Design/Advertising at Abilene Christian UniversityGraduate Certificate - Instructional Technology Design Educational/Instructional Media Design, Graduate Certificate - Instructional Technology Design Educational/Instructional Media Design at UMass Boston
Github Skills (6)
command-line-interface10
php10
object-oriented-programming10
security-scan10
command-line10
unit-test8
Programming languages (5)
Github contributions (5)
psecio/iniscan
Oct 2013 - Feb 2018
A php.ini scanner for best security practices
Role in this project:
Back-end Developer
Back-end DeveloperContributions:214 commits, 9 PRs, 16 pushes in 4 years 4 months
Contributions summary:Chris primarily focused on building the core functionality of the php.ini scanner. They started by creating the initial `Scan` class and progressively fleshed it out with methods for setting and retrieving file paths and rule configurations. The user then added key classes, including `Operation` and `Rule`, and implemented operations for checking settings, like "equals" and "isset." Furthermore, they integrated custom rule creation and a command-line interface for executing scans.
scannerconfigurationsecurity-toolssecurityphp
psecio/jwt
Jul 2014 - Feb 2015
A JWT (JSON Web Token) Encoder & Decoder
Contributions:61 commits, 14 pushes, 3 tags in 7 months
tokenjson-web-tokenweb-tokendecoderencoder
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.