Max Altgelt
Malware-Analyst at Nextron Systems
Hesse, Germany
Summary
🤩
Rockstar🎓
Top SchoolMax Altgelt is a malware analyst and software engineer based in Hesse, Germany, with six years of experience blending security research and backend development. Currently at Nextron Systems, he focuses on detecting and dissecting malicious implants and in-memory threats, leveraging deep Windows internals expertise honed through contributions to projects like pe-sieve. His open-source work spans notable tooling—updating VirusTotal and HybridAnalysis integrations in munin and enhancing gopsutil to expose Windows process environment and CWD—demonstrating low-level systems programming in both C++ and Go. Previously a software developer at Expleo Group, he brings disciplined engineering practices such as code standardization, build improvements, and robust error handling to security tooling. Collected contributions show a pattern of improving resilience and developer ergonomics in security and systems libraries rather than flashy features. He holds a BSc in Informatics from Westfälische Wilhelms-Universität Münster and combines academic grounding with practical, attacker-focused analysis.
6 years of coding experience
3 years of employment as a software developer
Bachelor of Science - BS, Informatik, Bachelor of Science - BS, Informatik at Westfälische Wilhelms-Universität Münster
Github Skills (35)
json10
apim10
c-language10
python10
wp-api10
windows10
antivirus10
process-management10
terminal-emulator10
internals10
winapi10
terminal-application10
go10
api10
progress-bar10
Programming languages (8)
Github contributions (5)
Neo23x0/munin
Feb 2020 - Sep 2021
Online hash checker for Virustotal and other services
Role in this project:
Back-end Developer
Back-end DeveloperContributions:9 commits, 5 PRs in 1 year 7 months
Contributions summary:Max focused on enhancing the functionality and stability of the `munin` project, which is an online hash checker. They updated the codebase to utilize the VirusTotal v3 API and the HybridAnalysis v2 API, replacing older API versions. Furthermore, they restructured the project by separating code into modular files for clarity. They improved the system's resilience by addressing error handling and resolving minor regressions.
securityvirustotalhashchecker
hasherezade/pe-sieve
Apr 2020 - Aug 2022
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:9 commits, 5 PRs, 3 comments in 2 years 4 months
Contributions summary:Max primarily contributed to bug fixes and code standardization within the PE-sieve project, focusing on improving code quality and consistency. Their work included standardizing include file names, addressing minor C++ issues, and resolving compiler warnings. They also made changes to the build process and included options for static library creation. The user also made changes and fixed includes related to Windows APIs.
memorymemory-forensicspe-analyzerpe-sievesecurity-tools
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.