Lucas Duffey
Senior Security Engineer at NECCDC Red team
Greater Seattle Area United States
Summary
👤
Senior🎓
Top SchoolLucas Duffey is a Senior Security Engineer with over a decade of hands-on offensive security experience, specializing in embedded and Linux systems for safety-critical products like Waymo's autonomous vehicles. He leads threat modeling, security architecture reviews, and vulnerability research from supply chain through public launch, and has a track record of red team operations at scale across Amazon, IOActive, and government contractors. Comfortable reversing Android and native code and reviewing C/C++/Java/Python, he pairs deep technical fluency with practical secure design and validation processes. An active contributor to Binary Ninja API documentation, he improves tooling clarity that helps other reverse engineers and security researchers. Based in the Greater Seattle Area, he combines mentorship and repeatable security practices with a proven history of finding and weaponizing complex vulnerabilities.
11 years of coding experience
7 years of employment as a software developer
Computer Science, Computer Science at United States Military Academy at West PointBS Computing Security, BS Computing Security at Rochester Institute of Technology
Github Skills (11)
ninja10
api-documentation10
bins10
documentation10
reverse-engineering9
source-code-analysis7
program-analysis7
code-analysis7
decompilation7
analyse7
python5
Programming languages (9)
Github contributions (5)
Vector35/binaryninja-api
Oct 2016 - Feb 2018
Public API, examples, documentation and issues for Binary Ninja
Role in this project:
Technical Writer
Technical WriterContributions:14 commits, 12 PRs, 68 comments in 1 year 4 months
Contributions summary:Lucas primarily contributed to the project by updating and correcting documentation for the Binary Ninja API. Their commits focus on improving clarity and accuracy within the documentation, including examples and descriptions of functions such as `get_basic_blocks_starting_at`, `set_default_session_data`, and `get_instruction_low_level_il`. They also corrected documentation for `Type.int` and `Type.function`, and clarified the purpose of various API methods. Finally, they updated documentation related to the LowLevelIL functions, providing essential information on their functionality.
apibinary-analysisdocumentation-examplesreverseengineeringdecompilation
lucasduffey/binja_smali
Aug 2016 - Oct 2017
Contributions:62 commits, 2 PRs, 114 pushes in 1 year 1 month
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.