Jay Turla
Principal Security Researcher at VicOne
Metro Cebu Philippines
Summary
👤
Senior🎓
Top SchoolJay Turla is a Principal Security Researcher with 13 years of hands-on experience in application and automotive security, vulnerability triage, and exploit development. An ex-seminarian turned infosec pro based in Cebu, he has a track record of responsible disclosures rewarded by Facebook, Adobe, Microsoft, Mozilla and others, and has contributed exploit and auxiliary modules to the widely used Metasploit Framework. Jay has led security operations and consulting at organizations like Bugcrowd, Viking Cloud and VicOne, while also teaching, presenting at DEF CON and many international conferences, and organizing Car Hacking Village events. His work spans botnet analysis, web app security and car hacking—where he blends deep reverse-engineering skills with practical red-team experience—and he routinely participates in bug bounties and community-driven bug bashes.
13 years of coding experience
12 years of employment as a software developer
Advance Diploma in Programming, Advance Diploma in Programming at Informatics Computer InstituteBachelor of Arts (B.A.), Philosophy and Religious Studies, Bachelor of Arts (B.A.), Philosophy and Religious Studies at Saint Peter College Seminary
Filipino, English, Cebuano, Latin
Github Skills (18)
penetration-testing10
python10
vulnerability10
web-application-security10
meta10
r10
it-security10
security10
exploit10
php10
security-vulnerability10
web-framework10
vulnerabilities10
meta-framework10
metasploit10
Programming languages (11)
Github contributions (5)
rapid7/metasploit-framework
Aug 2015 - Oct 2021
Metasploit Framework
Role in this project:
Security Engineer
Security EngineerContributions:2 reviews, 120 commits, 36 PRs in 6 years 2 months
Contributions summary:Jay primarily focused on identifying and addressing security vulnerabilities within the Metasploit Framework, specifically related to HTTP methods and web application security. Their contributions included modifying and creating modules for detecting HTTP Host-Header Injection and Cross-Site Tracing (XST) vulnerabilities. Furthermore, they worked on a module to exploit a backdoor in the web panel of the Zemra Botnet and updated existing modules to enhance the framework's capabilities in discovering and exploiting security flaws. They also created a module for multiple directory traversal vulnerabilities.
metasploitmetasploit-framework
shipcod3/IRC-Bot-Hunters
Apr 2015 - May 2022
Contributions:76 commits, 74 pushes, 1 branch in 7 years 2 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.