Ned Williamson
Staff Software Engineer at Tesla
Sunnyvale, California, United States
Summary
🤩
Rockstar🎓
Top SchoolNed Williamson is a Staff Software Engineer and vulnerability researcher with 13 years of experience blending deep systems engineering and cutting-edge fuzzing research. He has a proven track record at Google Project Zero and as a top bug bounty hunter, finding high-impact kernel and sandbox vulnerabilities and advancing fuzzing techniques like scheduler-aware and usermode kernel fuzzing. Ned helped win DARPA’s Cyber Grand Challenge work at ForAllSecure, contributed significant static analysis and multi-architecture support to the well-known QIRA project, and currently fuzzes Tesla’s Dojo ML compiler. Comfortable in Python, C++, and IDA Pro, he combines practical exploit development with production-focused tooling and thread-safe backend design. Based in Sunnyvale with a CS degree from Carnegie Mellon, he brings both offensive research pedigree and scalable engineering discipline to hard security problems.
12 years of coding experience
8 years of employment as a software developer
Bachelor’s Degree Computer Science, Bachelor’s Degree Computer Science at Carnegie Mellon University
French, Chinese
Github Skills (13)
static-analysis10
reverse-engineering10
ida10
python10
multithreading9
c-language8
linux8
cprogramming-language8
architectures7
mips7
architecture7
computer-architecture7
arm7
Programming languages (5)
Github contributions (5)
geohot/qira
Sep 2014 - Oct 2016
QEMU Interactive Runtime Analyser
Role in this project:
Back-end Developer
Back-end DeveloperContributions:184 commits, 37 PRs, 75 pushes in 2 years
Contributions summary:Ned's commits primarily focused on enhancing and maintaining the QIRA project, specifically by integrating and improving static analysis features. They added support for IDA Pro, enabling the program to set names and comments and to fetch tags from IDA. The user refactored the code to ensure thread safety, enhanced instruction resolution and added support for ARM and MIPS architectures for more comprehensive static analysis. Furthermore, the commits demonstrate an understanding of the project's architecture and the underlying components.
runtimeanalyserqemu
nedwill/qira
Oct 2014 - Apr 2015
Contributions:123 commits, 111 pushes, 60 branches in 5 months
runtimeanalyserqemu
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.