Masahiro Fujimura
セキュリティエンジニア at Recruit Co.,Ltd.
Chiyoda, Japan
Summary
🤩
Rockstar🎓
Top SchoolMasahiro Fujimura is a security engineer with nine years' experience building IoT client/server systems, authentication platforms (IdP), mobile apps, and conducting vulnerability assessments from Chiyoda, Japan. He combines hands-on development and DevOps skills—contributing core functionality and new analyzers to the well-known Trivy vulnerability scanner and expanding its advisory database support for multiple OSes. His work spans SBOM specification and generation, implementation of vulnerability detection tools, and Bluetooth 4.2 integrations, reflecting a focus on secure supply-chain and embedded scenarios. Comfortable with backend, tooling, and operational improvements, he often implements pragmatic features like auto-refreshing databases and improved logging to make security tooling more reliable in production. Despite modest English, he is an active open-source contributor and continuously seeks new challenges.
9 years of coding experience
3 years of employment as a software developer
準学士, 電気情報工学科, 準学士, 電気情報工学科 at 舞鶴工業高等専門学校
Github Skills (21)
devsecops10
docker10
vulnerability-management10
vulnerability-scanners10
suse10
databases10
dockers10
go10
golang10
scanning10
data-integration10
sql-database10
testing9
container9
security9
Programming languages (11)
Github contributions (5)
aquasecurity/trivy-db
Nov 2019 - May 2022
Role in this project:
Back-end Developer
Back-end DeveloperContributions:10 reviews, 11 commits, 11 PRs in 2 years 6 months
Contributions summary:Masahiro's commits primarily focus on adding support for multiple operating systems and related advisory databases to the trivy-db project. They implemented integration for SUSE, Photon OS, CBL-Mariner and GitLab Advisory Database. They also made various refactoring and testing changes, ensuring the stability and proper functioning of the added features, specifically related to the parsing of vulnerabilities and metadata.
aquasecurity/trivy
May 2019 - Dec 2022
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Role in this project:Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:88 reviews, 54 commits, 54 PRs in 3 years 8 months
Contributions summary:Masahiro contributed to the core functionality of the project by implementing new features and options for the `remic` command, including flags for skipping updates and managing exit codes. They also added support for a new cargo analyzer within the `fanal` component and a cargo scanner, indicating work related to vulnerability detection. Furthermore, the user introduced the auto-refresh functionality for the database and changed the log format, suggesting contributions to the system's operation and maintenance.
vulnerability-scannersiacmisconfigurationsrepositoriessecurity-tools
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.