Kyle Creyts
Senior Offensive Security Engineer at Anduril Industries
San Carlos, California, United States
Summary
👤
Senior🎓
Top SchoolKyle Creyts is a Senior Offensive Security Engineer with 14 years of hands-on experience in threat intelligence, malware analysis, and incident response across companies like Anduril, Coinbase, Apple, and Dropbox. Based in San Carlos, he blends curious, self-driven research with practical engineering—evident in open-source contributions to protocol analysis tooling where he implemented decryption and parsing for real-world malware traffic. He has led threat intelligence teams, advised security startups, and continues to invest and mentor early-stage security ventures. Kyle’s background ranges from high-volume NetFlow and full packet capture work to product security at scale, giving him both deep technical and operational perspectives. Notably, his career path is shaped as much by personal exploration and collaboration as formal roles, making him effective at turning obscure network artifacts into actionable intelligence.
14 years of coding experience
6 years of employment as a software developer
Information Assurance, Information Assurance at Eastern Michigan University
Spanish, Japanese
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (6)
packet-analysis10
reverse-engineering10
python10
network-protocol10
network-analysis10
cryptography10
Programming languages (5)
Github contributions (5)
MITRECND/chopshop
Apr 2013 - Apr 2016
Protocol Analysis/Decoder Framework
Role in this project:
Back-end Developer
Back-end DeveloperContributions:15 commits in 3 years
Contributions summary:Kyle's primary contribution focuses on the development and modification of a Python module related to network protocol analysis, specifically for decoding PlugX TCP traffic. They added and modified flag definitions, decryption routines, and parsing functions to dissect network packets. Furthermore, the user appears to be actively working on decrypting and interpreting the network data by implementing various decryption methods. The user demonstrates a focus on understanding and implementing the decryption of malicious network traffic.
protocoldecoder
kcreyts/osquery
May 2018 - Apr 2024
SQL powered operating system instrumentation, monitoring, and analytics.
Contributions:8 pushes, 2 branches in 6 years
instrumentationanalyticsoperating-systemsqloperating
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.