David Brumley
Chief AI And Science Officer at Carnegie Mellon University
Pittsburgh, Pennsylvania, United States
Summary
👤
Senior🎓
Top SchoolDavid Brumley is a distinguished technology leader and researcher with 16 years of experience bridging academic excellence and industry impact as Chief AI and Science Officer at Bugcrowd and former CEO of Mayhem. A CMU professor and former CyLab director, he earned top honors including a PECASE award and multiple DEFCON Black Badges while mentoring world-class hacking teams. He combines deep systems and security expertise—evident in contributions to the Binary Analysis Platform (bap) improving disassembly, memmap handling, and portability—with product-driven leadership that commercialized DARPA-hardened automated bug-finding into Mayhem. Based in Pittsburgh, he is equally fluent in building high-assurance tooling and advancing foundational research, often turning novel proofs-of-concept into scalable, mission-critical software.
16 years of coding experience
12 years of employment as a software developer
B.A. Mathematics, B.A. Mathematics at University of Northern ColoradoPh.D. Computer Science, Ph.D. Computer Science at Carnegie Mellon UniversityM.S. Computer Science, M.S. Computer Science at Stanford University
Github Skills (21)
static-analysis10
dis10
binarydiff10
ocaml10
disassembly10
reverse-engineering10
program-analysis10
data-structure9
memory-management9
devops9
data-structures9
automations8
cprogramming-language8
automation8
build-system8
Programming languages (16)
Github contributions (5)
BinaryAnalysisPlatform/bap
Nov 2014 - May 2017
Binary Analysis Platform
Role in this project:
Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:7 commits, 10 PRs, 48 comments in 2 years 6 months
Contributions summary:David primarily contributed to the binary analysis platform's backend functionality. They refactored code to change the output of immediate values to hex, enhancing the disassembler component. Furthermore, they introduced memmap iterators and integrated `Container.S0` signatures, which likely improve data handling. Finally, the user made infrastructure changes to support portability by modifying the build process with portable `mktemp` options and added an objdump parser.
binary-analysisemulatorvlsidisassemblerabstract-interpretation
dbrumley/fuzzer-test-suite
Jul 2021 - Nov 2024
Set of tests for fuzzing engines
Contributions:5 PRs, 12 pushes, 12 branches in 3 years 4 months
testingtesting-toolsenginesfuzzing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.