Lior Vaisman
Senior Software Engineer at Echo
Israel
Summary
🤩
Rockstar🎓
Top SchoolLior Vaisman is a Senior Software Engineer based in Israel with four years of professional experience building cloud-native, mission-critical systems and scalable microservice architectures. He has a strong full-stack background—from Angular and Cesium front-ends to NodeJS/Java backends, GraphQL, and containerized deployments—and a proven record in operationally sensitive environments including the Israeli Air Force. At Aqua Security and Argon he focused on cloud-native security, contributing notable open-source improvements to Trivy’s secret scanning logic and dependency parsing for better detection accuracy. He combines rapid learning and curiosity with practical delivery, having led integrations, 24/7 operational support, and CI/CD automation in high-stakes projects. Comfortable shifting between hands-on engineering and coordination roles, he brings an uncommon mix of security-focused engineering and real-time systems experience.
4 years of coding experience
8 years of employment as a software developer
BSc, Computer Science, BSc, Computer Science at The College of Management Academic StudiesComputer Software Engineering, Computer Software Engineering at Mamram - Basmach - IDF Computer Professions Academy
English, Russian, Hebrew
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (12)
devsecops10
go10
vulnerability-detection10
vulnerability-scanners10
security10
dockers9
kubernetes-pods9
container9
docker9
kubernetes9
yaml7
infrastructure-as-code6
Programming languages (4)
Github contributions (5)
aquasecurity/trivy
Apr 2022 - Jan 2023
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Role in this project:
Security Engineer
Security EngineerContributions:6 reviews, 7 commits, 6 PRs in 8 months
Contributions summary:Lior contributed to enhancing the secret scanning capabilities of the Trivy project. Their work included adding new rules for AWS secrets and incorporating default severity levels for secret findings. They also refactored the secret scanning logic to allow for list matching with secret subgroups, improving the flexibility of the secret detection engine. Additionally, they addressed issues related to the Yarn parser, adding ignore protocols to improve dependency analysis.
vulnerability-scannersiacmisconfigurationsrepositoriessecurity-tools
VaismanLior/fanal
Apr 2022 - Apr 2022
Static Analysis Library for Containers
Contributions:2 PRs, 21 pushes, 7 branches in 11 days
containerskubernetesstatic-analysisdocker
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.