Kevin Hock
Security Enigneer at Grammarly
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolKevin Hock is a security engineer with 11 years of experience building pragmatic, developer-friendly security tooling across major Bay Area tech companies including Grammarly, Pinterest, Yelp, and Datadog. He specializes in backend and cloud security—contributing to high-impact open-source projects such as pre-commit, detect-secrets, and Checkov, where he enhanced autoupdate workflows, secret-detection accuracy, and IaC checks for cloud misconfigurations. Known for shipping reliable test automation and refactors, Kevin bridges engineering and security by improving developer workflows to prevent secrets and misconfigurations before they reach production. Based in San Francisco, he pairs hands-on code contributions with a long-term view on security hygiene and community tools. Off the radar, he donates a substantial share of pre-tax income to effective altruism causes, reflecting a values-driven approach to his work and impact.
10 years of coding experience
8 years of employment as a software developer
Bachelor of Science (B.S.) Computer Science, Bachelor of Science (B.S.) Computer Science at Stony Brook University
Github Skills (26)
git10
python10
testing10
terraform10
refactor10
terraformer10
aws10
precommit10
pre-commit-hook10
infrastructure-as-code10
refactoring10
cloud-security10
command-line-interface9
static-analysis9
security9
Programming languages (15)
Github contributions (5)
Yelp/detect-secrets
Dec 2017 - Feb 2022
An enterprise friendly way of detecting and preventing secrets in code.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:17 reviews, 342 commits, 130 PRs in 4 years 2 months
Contributions summary:Kevin contributed to the `detect-secrets` repository by adding functionality to the server-side code for detecting and preventing secrets in the codebase. This included adding features like git blame, excluding certain file extensions, and incorporating author information using git blame output. Furthermore, the user made a series of improvements to the underlying secrets collection and baseline management, demonstrating a focus on enhancing the tool's core capabilities. The user also updated the pre-commit hook functionality, showcasing a practical understanding of security best practices.
secrets-detectionsecuritysecretsyelpdetecting
python-security/pyt
Feb 2017 - Mar 2020
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Role in this project:Back-end Developer
Back-end DeveloperContributions:523 commits, 145 PRs, 351 pushes in 3 years
Contributions summary:Kevin's commits primarily focus on refactoring and enhancing the functionality of the `pyt` tool. They have made stylistic improvements to the code, including better import structures and README updates. These changes suggest that the user is involved in maintaining the project's code quality and usability for developers.
web-applicationspythonsecurity-toolspython-webbugbounty
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.