Max Moroz
Director Of Security Engineering at Instacart
Mountain View, California, United States
Summary
🤩
Rockstar🎓
Top SchoolMax Moroz is a security engineering leader with 11 years of hands-on experience building and scaling defenses for billion-user platforms, now leading Product and Infrastructure Security at Instacart. He built and grew global teams at ByteDance from 3 to 40 engineers across product security, red team, infra, detection, and governance while embedding automated controls into large SDLCs to improve developer velocity. At Google he was a core developer for ClusterFuzz and OSS-Fuzz adoption, driving hundreds of fuzzers and reporting tens of thousands of bugs across critical open-source projects and shipping tooling like Chrome’s first code-coverage pipeline. Max combines deep technical craftsmanship—contributions to american fuzzy lop, libFuzzer workshop materials, and llvm-cov optimizations—with strategic experience in regulatory engagement, bug bounty modernization, and incident response. He holds advanced training in law and security, and is known for turning research-grade fuzzing and build optimizations into production-grade programs that materially reduce risk.
11 years of coding experience
9 years of employment as a software developer
Executive Education, Executive Education at Stanford University Graduate School of BusinessMaster's degree, Law, Master's degree, Law at USC Gould School of LawMaster's degree, Computer and Information Systems Security / Information Assurance, Master's degree, Computer and Information Systems Security / Information Assurance at National Research Nuclear University MEPhI (Moscow Engineering Physics Institute)
English, Russian
Github Skills (36)
json10
debug10
c-language10
python10
multithreading10
llvm10
testing10
bash10
c1110
cicd10
gcp10
security10
c1710
code-coverage10
fuzzing10
Programming languages (14)
Github contributions (5)
Dor1s/libfuzzer-workshop
Nov 2016 - Dec 2021
Repository for materials of "Modern fuzzing of C/C++ Projects" workshop.
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:5 reviews, 55 commits, 3 PRs in 5 years 2 months
Contributions summary:Max contributed significantly to a workshop repository focused on fuzzing C/C++ projects. They implemented various fuzzers and examples within different lessons, showcasing practical application of fuzzing techniques. The user's work included setting up testing environments, generating test cases, and integrating with tools like radamsa. They also provided source code for libFuzzer, ensuring the workshop participants had necessary resources.
workshopcppfuzzingc-projects
google/AFL
Jul 2019 - Jul 2020
american fuzzy lop - a security-oriented fuzzer
Role in this project:Back-end Developer
Back-end DeveloperContributions:4 releases, 1 review, 16 commits in 11 months
Contributions summary:Max primarily focused on maintaining and updating the `afl` project's codebase. Their contributions included bumping the version number, preparing for releases, and fixing bugs related to shared memory operations. They also reverted a change related to default AFL_PATH and fixed a typo. These updates demonstrate a focus on project stability and ongoing maintenance.
security-toolsfuzz-testingfuzzysecuritysecurity-testing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.