Graham Bleaney
Member Of Technical Staff at Microsoft AI
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolGraham Bleaney is a versatile software and security engineer with 12 years of experience, currently a Member of Technical Staff on Microsoft AI’s Superintelligence team. He blends deep systems-level C++ and assembly work with full-stack JavaScript and product-focused leadership, having led teams at Bloomberg and Meta to scale critical services and prevent web vulnerabilities across billions of lines of code. At Meta he applied static taint analysis (Pysa) to privacy and regulatory challenges and has publicly presented on Python security, while his open-source contributions include security hardening to Zulip and type/taint improvements to Python tooling. He has a track record of shipping resilient infrastructure—reducing outages, building CI/CD at scale, and influencing C++ standard discussions on hashing—and even responsibly disclosed vulnerabilities in consumer products like Dropbox and PayPal. Trained in Systems Design Engineering at the University of Waterloo, he operates at the intersection of engineering, security, and product to turn complex requirements into practical, auditable systems.
12 years of coding experience
10 years of employment as a software developer
Forest Heights Collegiate InstituteBachelor of Applied Science (BASc) Systems Design Engineering, Bachelor of Applied Science (BASc) Systems Design Engineering at University of Waterloo
English
Github Skills (38)
static-typing10
typesc10
c-language10
static-analysis10
type-check10
back-end-development10
python10
stub10
stubs10
django10
vulnerability10
it-security10
dynamic-typing10
typescript10
implicit-typing10
Programming languages (9)
Github contributions (5)
facebook/pyre-check
Jun 2019 - May 2022
Performant type-checking for python.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:92 reviews, 185 commits, 8 PRs in 3 years
Contributions summary:Graham's contributions focused on enhancing the project's type-checking capabilities for Python. They implemented new taint annotations and rules, particularly for security-related aspects like remote code execution and SQL injection vulnerabilities, by modifying Python stub files for libraries like requests, urllib, http.client, and Django. Furthermore, the user worked on generating taint models for GraphQL resolver functions. The commits included improvements to the existing parsing code and tests.
typecheckercontrol-flow-analysispythoncode-qualityabstract-interpretation
bloomberg/bde
May 2014 - Aug 2014
Basic Development Environment - a set of foundational C++ libraries used at Bloomberg.
Role in this project:Back-end Developer
Back-end DeveloperContributions:118 commits in 3 months
Contributions summary:Graham primarily focused on refactoring and enhancing the documentation for the `bslstl` and `bslh` C++ libraries. They made significant improvements to the descriptions of methods like `emplace_back` and `push_back` within the `bslstl_vector.h` file, including clarifying the use of move semantics and exception safety. Additionally, they added and tested a new `+=` operator for `bslstl::StringRefData` within the `bslstl_string.h` library, preventing unnecessary copies. The user also created and tested a new component to define and generate seeds for hash algorithms, and updated the hashing algorithm implementation to use them.
cppallocatorspolymorphic-allocatorsbloombergc-plus-plus
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.