John Poulin
Chief Technology Officer at Cloud Security Partners
Bangor, Maine, United States
Summary
👤
Senior🎓
Top SchoolJohn Poulin is a seasoned technology leader and application security practitioner with 12 years of experience blending hands-on software development and security leadership. As CTO of Cloud Security Partners he helps organizations manage risk across secure code education, cloud security, and threat modeling, drawing on prior roles as Staff Manager and Principal Product Security Engineer at GitHub and nVisium. He has a strong background in secure code review and architecture, has led teams shipping security-aware software, and regularly speaks and trains at conferences like DEF CON and DevSecCon. An active contributor to OWASP’s RailsGoat project, he brings practical Rails and remediation experience that informs his advisory work. Based in Bangor, Maine, he pairs Fortune 500 and startup experience with a pragmatic, developer-centered approach to improving security maturity.
12 years of coding experience
15 years of employment as a software developer
Bachelor of Science (B.S.), Computer Science, Bachelor of Science (B.S.), Computer Science at University of MaineNokomis
German
Stackoverflow
71reputation
1kreached
7answers
0questions
Github Skills (17)
rails10
command-injection10
security10
ruby-on-rails10
sql-injection8
api7
apidoc7
hyperlink6
conditional-statements6
private-messaging6
design-patterns6
php6
href6
css6
awk6
Programming languages (5)
Github contributions (5)
OWASP/railsgoat
Jul 2013 - Feb 2018
A vulnerable version of Rails that follows the OWASP Top 10
Role in this project:
Back-end Developer
Back-end DeveloperContributions:153 commits, 4 PRs, 5 comments in 4 years 7 months
Contributions summary:John primarily focused on modifying the Railsgoat application's code, specifically the tutorials related to security vulnerabilities. They corrected naming conventions and updated code examples within the command injection tutorial. Additionally, they merged and shifted code related to existing tutorials and incorporated documentation for the Gauntlet tool and API key addition. The user demonstrated skills in Rails application development, security, and possibly refactoring.
ruby-on-railsvulnerablerailssecurityvulnerabilities
SecCasts/seccasts
May 2014 - Aug 2014
Contributions:14 commits in 3 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.