Colm Heigeartaigh
Senior Principal Product Security Engineer at Qlik
Dublin, Dublin 1, Ireland
Summary
🤩
Rockstar🎓
Top SchoolColm Heigeartaigh is a Senior Principal Product Security Engineer with 17 years of experience, currently leading product security at Qlik and formerly shaping security architecture at Talend. A PhD in cryptography underpins his deep expertise, which he applies across a broad open-source footprint as an active committer to many high-impact Apache projects (Camel, CXF, Shiro, Ranger, Knox, Syncope) and security tools like DefectDojo and OpenSSF Allstar. He blends hands-on Java back-end engineering—improving tests, TLS/HTTP signature handling, SBOM/license discovery, and secure processing—with pragmatic dependency and maintenance work that hardens long-lived codebases. Colm’s contributions span both foundational middleware (Apache Camel/CXF/ActiveMQ) and modern supply-chain tooling (Syft, DefectDojo), reflecting a rare mix of legacy-system stewardship and contemporary DevSecOps practice. He publishes about open-source security and maintains an active developer presence on GitHub and Twitter, demonstrating continuous community impact beyond his corporate roles.
17 years of coding experience
19 years of employment as a software developer
Ph.D., Computing, Ph.D., Computing at Dublin City University
Stackoverflow
1,900reputation
207kreached
112answers
0questions
cxf
top-1%
Github Skills (79)
dependency-management10
vulnerability-management10
jaas10
messaging10
python10
testing10
sbom10
authentication10
spring-security10
apache-camel10
integrations10
security10
javas10
java-libraries10
junit10
Programming languages (19)
Github contributions (5)
apache/cxf
May 2015 - Jan 2023
Apache CXF
Role in this project:
Back-end Developer
Back-end DeveloperContributions:107 reviews, 4729 commits, 198 PRs in 7 years 9 months
Contributions summary:Colm primarily worked on improving and maintaining the Apache CXF framework, focusing on core functionalities. Their commits addressed issues in the core of the CXF library by reading system properties once for threshold values. The user also updated HTTP client functionalities for TLS settings and fixed issues related to handling message attachments in a more efficient way. Furthermore, the user added a new test case for the HTTP Signature implementation.
network-clientxmlapacheapache-cxfnetwork-server
apache/ranger
Jan 2016 - Jun 2019
Apache Ranger - To enable, monitor and manage comprehensive data security across the Hadoop platform and beyond
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:279 commits in 3 years 4 months
Contributions summary:Colm's commits primarily focus on refactoring code to remove deprecated dependencies and replace `StringBuffer` with `StringBuilder` suggesting an effort to modernize and improve code efficiency. They also address issues related to duplicate and unused imports as well as a few security related issues such as incorrect header usage, which indicate an interest in maintainability and security. They also touch on KMS and SASL SSL configuration, indicating work on security for Apache Ranger.
javaapacheapache-rangerrangerauthz
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.