Facundo Tuesca
Security Engineer at trailofbits
Amsterdam, North Holland, Netherlands
Summary
🤩
RockstarFacundo Tuesca is a Security Engineer based in Amsterdam with 11 years of hands-on experience securing and automating back-end systems. He blends security engineering and DevOps practices, contributing to high-profile open-source projects like PyPI, Node.js, and the pyca/cryptography library—work that spans OIDC publisher integrations, dependency-vulnerability automation, and cryptographic primitive support. Comfortable across Python, Rust, and CI/CD automation, he’s implemented test vectors, hardened crypto backends, and automated dependency updates using GitHub Actions. Notably, his contributions include production-focused fixes such as case-insensitive path handling in OIDC flows and performance improvements for NVD vulnerability checks, reflecting a pragmatic focus on reliability and measurability.
11 years of coding experience
Github Skills (38)
dependency-manager10
dependency-management10
github-ci10
javascript10
pytest10
python10
dependency-analysis10
vulnerability-scanners10
django10
testing10
it-security10
oid10
ch10
cicd10
security10
Programming languages (15)
Github contributions (5)
pyca/cryptography
May 2023 - Apr 2026
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:127 reviews, 62 PRs, 173 comments in 2 years 11 months
Contributions summary:Facundo primarily contributed to the cryptography library by implementing support for ChaCha20-Poly1305 with BoringSSL, including the necessary bindings and backend implementations. They also fixed documentation issues related to ChaCha20, clarifying non-RFC compliance and adjusting examples. Furthermore, the user added test vectors for ChaCha20 counter overflow and AES-GCM-SIV, and support for deterministic ECDSA (RFC6979). Their work also involves adding a `poly1305` implementation for BoringSSL and LibreSSL and migrating the PKCS7 backend to Rust.
cryptographypython
nodejs/node
Jun 2022 - Dec 2022
Node.js JavaScript runtime ✨🐢🚀✨
Role in this project:Backend & DevOps Engineer
Backend & DevOps EngineerContributions:8 reviews, 31 commits, 9 PRs in 5 months
Contributions summary:Facundo primarily contributed to the Node.js project by developing and implementing scripts for dependency vulnerability checking and automation. They added features to utilize API keys for the National Vulnerability Database (NVD) to improve script performance. Furthermore, the user automated dependency updates for libraries like base64, acorn, libuv, and OpenSSL using GitHub Actions, streamlining the project's maintenance. These contributions focus on security, automation, and dependency management within the Node.js ecosystem.
javascriptnodejsnodejsruntime
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.