Francisco González
Security at Robinhood
Durham, North Carolina, United States
Summary
🤩
Rockstar🎓
Top SchoolFrancisco González is a seasoned security engineer with nearly two decades of hands-on experience across pentesting, malware analysis, and vulnerability research, now based in Durham, NC. He has moved from boutique consulting in Madrid to threat analysis at Fox-IT and advanced vulnerability research at Salesforce, where his team was credited with multiple CVEs and he published Ponce, the 2016 Hex-Rays IDA Pro Plug-In winner. His work spans reverse engineering, symbolic/concolic execution, binary instrumentation and coverage-guided fuzzing, and he has a track record delivering 0-day exploits for red team operations. At Cruise and Robinhood he focused on offensive operations, DevOps-focused assessments, and managing offensive infrastructure, and he currently continues that focus in senior security roles. Fluent in low-level programming and tool development, he combines academic rigor (MSc in Computer Science) with prolific open-source contributions that bridge research and practical attack/defense tooling. Notably, his Ponce plugin integrated Triton-powered symbolic execution to make taint and constraint solving accessible inside IDA Pro.
10 years of coding experience
13 years of employment as a software developer
Master's degree Computer Science, Master's degree Computer Science at Universidad de Burgos
Spanish, English
Github Skills (4)
cprogramming-language10
triton10
c-language10
symbolic-execution10
Programming languages (12)
Github contributions (5)
illera88/Ponce
Aug 2016 - Aug 2020
IDA 2016 plugin contest winner! Symbolic Execution just one-click away!
Role in this project:
Back-end Developer
Back-end DeveloperContributions:2 releases, 85 commits, 59 pushes in 4 years
Contributions summary:Francisco primarily contributed to the "Ponce" plugin, focused on symbolic execution within IDA Pro. Their work involved implementing features for tainting analysis, adding comments with operand information, and integrating Triton for symbolic execution. The user also worked on adding the ability to negate the conditions to solve and inject.
symbolic-executionone-clickida-pluginidaclick-away
0ca/corpus_pdfs
Jan 2017 - Apr 2017
Contributions:15 commits in 2 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.