Kevin Stubbings
Security Researcher at GitHub
Los Angeles Metropolitan Area United States
Summary
🤩
Rockstar🎓
Top SchoolKevin Stubbings is a security researcher at GitHub with a decade of experience focused on hardening developer tooling and code-scanning infrastructure. At GitHub he contributes to CodeQL, adding sanitizers and fixes that mitigate reflected XSS, SQL injection, prototype pollution, and path traversal—work that directly improves automated security analysis used by thousands of projects. Previously he interned at CrowdStrike and Rently, gaining hands-on experience in security engineering and QA that informs his pragmatic approach to vulnerability mitigation. Based in the Los Angeles area and trained in computer science at UC San Diego, he combines deep technical focus with a practical sense for shipping reliable defenses. Off the clock he says “I be cooking,” hinting at a methodical, experimental mindset that fuels both his research and personal projects.
10 years of coding experience
1 year of employment as a software developer
University of California, San DiegoDual Enrollment, Dual Enrollment at Moorpark College
Github Skills (6)
it-security10
github-advanced-security10
go10
xss10
codeql10
security10
Programming languages (13)
Github contributions (5)
github/codeql
Jun 2022 - Feb 2025
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
Role in this project:
Security Engineer
Security EngineerContributions:27 reviews, 19 PRs, 67 comments in 2 years 8 months
Contributions summary:Kevin primarily contributed to improving the security of the CodeQL code scanning project. They added sanitizers to prevent reflected XSS and SQL injection vulnerabilities. Additionally, the user made changes to the codebase to address potential prototype pollution issues and enhance the handling of file paths to prevent path traversal attacks. These changes demonstrate a focus on identifying and mitigating common web security vulnerabilities.
github-advanced-securitysecurity-toolsgithub-security-labsecurity-researcherssecurity
Kwstubbs/codeql
Dec 2022 - Feb 2025
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise
Contributions:122 pushes, 23 branches in 2 years 2 months
enterprisegithub-advanced-securitysecurity-toolslgtmsecurity-researchers
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.