Matty Jones
Principle Product Security Engineer at Salesforce
United States
Summary
🤩
Rockstar🎓
Top SchoolMatty Jones is a Principal Product Security Engineer with 15 years of experience fortifying cloud and infrastructure platforms at Salesforce, progressing from hands-on infrastructure roles to senior security leadership. He blends deep operational expertise with product-focused security, having improved developer workflows and testing pipelines on notable open-source projects like Salesforce’s policy_sentry. Known for a practical, tool-first approach—“finding things not meant to be found”—he maintains security tooling such as Wraith and volunteers with Parrot Security while freelancing on infrastructure and tooling. Matty’s background in electronic engineering technology and long history of ship-it engineering lend him an uncommon mix of low-level systems intuition and product risk management.
15 years of coding experience
13 years of employment as a software developer
USENETA.S. EET Electronic Engineering Technology, A.S. EET Electronic Engineering Technology at Nashua Community College
Stackoverflow
1,130reputation
492kreached
3answers
8questions
Github Skills (23)
python10
testing10
cicd10
security9
it-security9
devops9
aws9
automation9
automations9
ias8
cloud-computing7
e-mail6
influxdb6
argparse6
go6
Programming languages (15)
Github contributions (5)
salesforce/policy_sentry
Oct 2019 - Dec 2019
IAM Least Privilege Policy Generator
Role in this project:
DevOps Engineer & Security Engineer
DevOps Engineer & Security EngineerContributions:18 commits, 5 PRs, 1 push in 1 month
Contributions summary:Matty primarily focused on establishing a robust testing and build environment for the project. They implemented invoke tasks for initializing the database, running security scans, and executing unit and integration tests. The user integrated linting and autopep8 tasks to enforce code quality standards. Their contributions helped streamline the development workflow and enhance the project's security posture.
policycloudsecurityiam-policyleast-privilegesecurity
N0MoreSecr3ts/wraith-signatures
Aug 2020 - Jul 2022
Signatures for wraith used to detect secrets across various sources
Contributions:3 releases, 11 commits, 4 PRs in 1 year 11 months
security-toolssignaturesbugbountysecuritycybersecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.