Chris Frohoff
Cyber Security Engineer, Principal at Qualcomm
San Diego, California, United States
Summary
🤩
Rockstar🎓
Top SchoolChris Frohoff is a Principal Cyber Security Engineer with 13 years of experience blending offensive security, application engineering, and systems architecture to harden large-scale platforms. Based in San Diego and currently at Qualcomm, he leads discovery and remediation of novel vulnerabilities across web, cloud, and enterprise stacks while shaping DevSecOps and Zero Trust practices. He pairs deep hands-on skills in Java, Python, Linux, containers and cloud with a proven track record in red-team techniques, incident response, and bespoke tooling—ranging from traffic decrypters to IDS/CLI integrations. An active open-source contributor, he maintains and improved testing for ysoserial, the well-known Java deserialization payload tool, reflecting his knack for both building and breaking security-critical software. Former leadership roles at Sony and UCSD add product-focused engineering and team mentorship to his profile. He’s known for pragmatic creativity: automating assessment workflows and turning exploit research into reliable defensive controls.
13 years of coding experience
17 years of employment as a software developer
University of California, San Diego
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (10)
deserialization10
javas10
junit10
java10
testing10
payload9
vulnerability9
serialization9
exploit9
data-serialization9
Programming languages (9)
Github contributions (5)
frohoff/ysoserial
Jan 2015 - Jul 2022
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Role in this project:
QA Engineer / Test Automation Engineer
QA Engineer / Test Automation EngineerContributions:4 releases, 194 commits, 101 PRs in 7 years 6 months
Contributions summary:Chris primarily focused on improving the test suite for the ysoserial project. Their contributions include clearing checks between tests, making test cases more robust, and fixing existing tests. They also added and modified test harnesses and dependencies to ensure accurate and reliable test results. These changes significantly improved the quality and reliability of the testing infrastructure.
unsafedeserializationsecurityjavadesergadget
frohoff/CTFd
Oct 2015 - Jun 2021
CTFs as you need them
Contributions:15 commits, 16 pushes, 4 branches in 5 years 9 months
ctfctfsneed
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.