Matthew Mcquaid
Software Engineer at Semgrep
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolMatthew Mcquaid is a software engineer in San Francisco with seven years of experience focused on static analysis and supply chain security at Semgrep. He combines deep interest in type theory and functional programming with practical backend engineering, having contributed significant security and parsing improvements to the widely used semgrep static analysis project. His work includes complex control-flow and constant-propagation enhancements (notably adding PHP goto handling and dead-code avoidance) that improve analysis accuracy across languages. Prior roles span ML-driven search and NLP systems at Capital One and RealNetworks, and teaching programming languages and logic at Carnegie Mellon, reflecting both research-minded rigor and hands-on production experience.
7 years of coding experience
Bachelor's degree, Linguistics and Computer Science, Bachelor's degree, Linguistics and Computer Science at Carnegie Mellon University
Github Skills (10)
php10
static-analysis10
parsing10
parse10
control-flow9
scala9
flow-control9
go8
it-security8
security8
Programming languages (10)
Github contributions (5)
semgrep/semgrep
Sep 2021 - Jan 2023
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:265 reviews, 364 commits, 259 PRs in 1 year 4 months
Contributions summary:Matthew primarily contributed to enhancing the security and functionality of the PHP static analysis tool, Semgrep. Their work included adding support for the `goto` statement in PHP, which involved modifying the code's core parsing and generic AST translation logic. They also implemented improvements to constant propagation and control flow analysis, including the handling of array and tuple destructuring in assignments. Furthermore, the user refactored the code to stop analyzing dead code and improved the accuracy of the code analysis for Scala.
looklinterpythonr2cjavascript
mmcqd/pr-comment-test
Dec 2022 - Feb 2025
Contributions:56 PRs, 19 pushes, 14 branches in 2 years 2 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.