Francis Alexander
Senior Staff Security Engineer at LinkedIn
Sunnyvale, California, United States
Summary
👤
Senior🎓
Top SchoolFrancis Alexander is a Senior Staff Security Engineer with 12 years of experience specializing in cloud, DevOps, container orchestration, and NoSQL security, currently securing AI agents and ML infra at LinkedIn. He blends deep research and hands-on engineering, having authored and contributed to notable open-source tools like the NoSQL Exploitation Framework, Garfield, and NoPo that focus on distributed systems and honeypots. Francis has delivered trainings and presented research at major conferences worldwide, demonstrating a knack for translating cutting-edge findings into practical security controls and tooling. His work spans DAST, SAST, and secret scanning at scale, with a strong automation-first approach to improving developer workflows. Based in Sunnyvale, he pairs production-scale security engineering with an active public research blog and frequent community engagement. A less obvious strength is his track record of turning offensive research into defensive automation that scales across cloud-native platforms.
12 years of coding experience
11 years of employment as a software developer
High School, Computer Science, High School, Computer Science at St Antonys public SchoolBachelor of Technology (BTech), Computer Science, Bachelor of Technology (BTech), Computer Science at Amal Jyothi College of Enginnering
Hindi, Malayalam
Github Skills (14)
security-testing10
couchdb10
mongodb10
python10
redis10
mongodb-database10
enumeration9
enumerate9
vulnerability-assessment9
database-security9
api8
apidoc8
cassandra7
hbase7
Programming languages (7)
Github contributions (5)
torque59/Nosql-Exploitation-Framework
Dec 2013 - Apr 2018
A Python Framework For NoSQL Scanning and Exploitation
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:132 commits, 10 PRs, 400 pushes in 4 years 4 months
Contributions summary:Francis primarily focused on developing and extending the functionality of a NoSQL exploitation framework. They implemented core features for scanning, enumerating, and exploiting various NoSQL databases, including MongoDB, CouchDB, and Redis. Their contributions included the creation of new modules for brute-force attacks, system file enumeration, and RCE checks, demonstrating a focus on security testing and vulnerability assessment within the context of NoSQL databases. The user also added features to mass scan, scan web apps, and mass scan to the tool.
nosql-enumerationpythonnosqlsecuritynosql-database
torque59/ctf-vagrant-64
Oct 2018 - Nov 2020
Contributions:15 commits, 12 pushes, 1 branch in 2 years 2 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.