Malte Kraus
Principal Software Security Engineer at Harness
Nuremberg, Bavaria, Germany
Summary
🤩
Rockstar🎓
Top SchoolMalte Kraus is a Principal Software Security Engineer based in Nuremberg with a decade of hands-on experience securing complex, mostly C-based systems and cloud-native products. He has progressed from applied research on ARM TrustZone to driving product security and incident response at SUSE and security research through the Qwiet AI acquisition by Harness, where he now leads security engineering efforts. Malte combines deep code-level expertise—manual and automated analysis, fuzzing, CodeQL—with practical operational work like vulnerability disclosure and STIG/SCAP automation. He contributes to open-source tooling for code analysis (notably backend improvements to the Joern code property graph project), improving build reliability and multi-language import capabilities. Known for turning defensive, forensic findings into actionable remediation, he blends research rigor with production-minded engineering. Fluent in both low-level vulnerability discovery and large-scale security program execution, he brings an uncommon mix of academic, open-source and enterprise security experience.
9 years of coding experience
11 years of employment as a software developer
Master of Science (MSc) Computer Science, Master of Science (MSc) Computer Science at FAU Erlangen-Nürnberg
German, English
Github Skills (13)
maven10
javas10
code-analysis10
query-language10
java10
scala10
cpp8
binary-data8
javascript8
binary-format8
c178
python8
c118
Programming languages (16)
Github contributions (5)
joernio/joern
Jul 2022 - Jan 2023
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
Role in this project:
Back-end Developer
Back-end DeveloperContributions:369 reviews, 7 commits, 34 PRs in 5 months
Contributions summary:Malte primarily contributed to improving the Joern code analysis platform, focusing on backend logic and build processes. They fixed Maven dependency fetching issues across multiple sub-projects, added more logging for debugging, and implemented support for importing code from strings for a wider array of languages. Additional contributions include adding CONTAINS edges for TemplateDom nodes and making some query-db queries more defensive.
controlflowpythonjavabytecodedataflowjavascript
ChaAC-FAU/labchain
Mar 2017 - Apr 2017
This project is a completely new blockchain-based coin, with P2P networking, a consensus mechanism and a wallet interface. The goal of the project is to provide a framework that is easy to modify for people who want to develop proof-of-concepts for blockchain-based technology.
Contributions:98 commits, 1 push in 26 days
mechanismconsensusgoalp2pblockchain
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.