Eduardo Melia
Co-Founder & AI Security Lead at Bounty Security
Andorra
Summary
🤩
Rockstar🎓
Top SchoolEduardo Melia is a Co-Founder and AI Security Lead with 10+ years of hands-on offensive security experience, specializing in pentesting LLMs, AI agents, and ML pipelines deployed in production. He builds and ships tooling—creator of Burp Bounty Pro, Burp Bounty Go, GBounty and the AI-powered Bounty Prompt Burp Suite extension—and combines that product work with red teaming expertise against prompt injection, data exfiltration, and multi-agent logic abuse. As founder of Bounty Security and a mentor at Divisual, he pairs practical attack experience with training others to design and defend AI automations using frameworks like MITRE ATLAS, OWASP LLM Top 10 and NIST AI RMF. His background includes senior roles at Telefónica Tech, Tarlogic and collaborations with Cobalt and Strike, and a rare blend of malware reverse-engineering roots and modern AI-hacking craft that helps him find weaknesses others overlook.
10 years of coding experience
4 years of employment as a software developer
Malicious Software and its Underground Economy: Two Sides to Every Story, Malicious Software and its Underground Economy: Two Sides to Every Story at Royal Holloway, University of London
Spanish, Catalan, English
Github Skills (10)
it-security10
javas10
vulnerability-detection10
burp10
bug-tracker10
bug-reporting10
vulnerability-scanners10
java10
bugtracking10
security10
Programming languages (5)
Github contributions (5)
wagiro/BurpBounty
Jun 2018 - May 2022
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:20 releases, 1 review, 21 commits in 3 years 11 months
Contributions summary:Eduardo primarily contributed to the Burp Bounty extension for Burp Suite. Their commits focused on updating the extension to version 3.3, adding and modifying features related to active profiles, including the implementation of a grep functionality to filter request and response content. Furthermore, they implemented and updated profiles for detecting security vulnerabilities, including log4j RCEs, demonstrating a focus on security aspects of the extension. The user also made modifications to the extension's UI.
scanbugbountypassive-scannerburp-extensionsintuitive
wagiro/pintool
Nov 2015 - Jan 2020
This tool can be useful for solving some reversing challenges in CTFs events.
Contributions:21 commits, 2 PRs, 19 pushes in 4 years 3 months
eventssolvingctfreversingctfs
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.