Jesse Michael
Principal Researcher at Eclypsium, Inc.
Portland, Oregon, United States
Summary
👤
SeniorJesse Michael is a Principal Researcher based in Portland, Oregon with nine years focused on hardware and platform security research and a career rooted in security software dating back to the early 2000s. He specializes in uncovering low-level vulnerabilities—BIOS/firmware, ME manufacturing modes, SMBus/ SPD controls—and strengthening security assessment tooling, notably contributing checks and reliability improvements to the well-known CHIPSEC platform. At Eclypsium he leads deep-dive validation and threat research, building on prior roles at McAfee and Intel where he published practical, high-impact findings from unusual attack surfaces. Jesse combines a hacker’s curiosity with disciplined engineering practices, improving testability, logging, and reporting in security codebases. Colleagues rely on him to “break things” intentionally to find what matters most before adversaries do. He pairs long-term institutional experience with active open-source contributions that help raise industry-wide firmware security standards.
9 years of coding experience
18 years of employment as a software developer
Github Skills (11)
it-security10
vulnerability-assessment10
python10
security-scan10
security10
web-framework9
reverse9
reverse-engineering9
smbus9
embedded8
sys8
Programming languages (8)
Github contributions (5)
chipsec/chipsec
Aug 2018 - Jun 2019
Platform Security Assessment Framework
Role in this project:
Security Engineer
Security EngineerContributions:5 commits, 2 PRs, 14 comments in 9 months
Contributions summary:Jesse primarily contributed to enhancing the security assessment capabilities of the CHIPSEC framework. Their work involved developing checks to identify vulnerabilities, such as the ME Manufacturing Mode status and the SPD Write Disable bit in SMBus controllers. They integrated code from external resources, like the coreboot project, to improve the reliability of checks. The user also implemented improvements to the codebase, including the use of logger functions, enhancing the framework's testing and reporting features.
security-toolsfirmwaresecurityfirmware-toolssecurity-platform
eclypsium/BootHole
Jul 2020 - Aug 2020
BootHole vulnerability (CVE-2020-10713). detection script, links and other mitigation related materials
Contributions:16 commits, 1 PR, 13 pushes in 6 days
securitycvevulnerabilitylinksmitigation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.