Neil Matatall
Staff Software Engineer at LocoMocoSec: Hawaiʻi Security Conference
Kailua, Hawaii, United States
Summary
🤩
Rockstar🎓
Top SchoolNeil Matatall is a Staff Software Engineer with over 14 years of experience specializing in security-first engineering and remote-first collaboration. He has led security efforts at scale—helping virtually eliminate account takeovers at GitHub and driving 2FA and authorization frameworks at ActBlue—while also co-founding the Brakeman static analysis product and the LocoMocoSec conference. A prolific contributor to Ruby/Rails security tooling (notably secure_headers and brakeman), he blends hands-on engineering with people leadership, mentoring, and process improvements across startups and large enterprises. Comfortable with asynchronous work and excellent written communication honed by a decade of remote roles, he prefers flexible schedules and teams with strong ethical and philanthropic alignment. Equally at home digging into CSP and static analysis as he is organizing community events, he brings deep practical knowledge of developer workflows and a “secure by default” mindset.
14 years of coding experience
14 years of employment as a software developer
University of California, Irvine
Github Skills (17)
ruby-rails10
static-analysis10
content-security-policy10
sec10
testing10
it-security10
rails10
ruby10
security10
brakeman10
vulnerabilities10
headers9
security-txt9
middleware9
http-header9
Programming languages (9)
Github contributions (5)
github/secure_headers
Jan 2013 - Nov 2021
Manages application of security headers with many safe defaults
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:34 releases, 9 reviews, 739 commits in 8 years 11 months
Contributions summary:Neil's commits primarily focus on enhancing the security of the `github/secure_headers` repository, which manages security headers. Their contributions include removing unnecessary comments, bumping the version, renaming a CSP header constant, and removing superfluous code. The user implemented changes to Content Security Policy (CSP) configurations, demonstrating proficiency in this area.
csphttp-headersecure-headersracksecurity-headers
presidentbeef/brakeman
Mar 2012 - Jul 2016
A static analysis security vulnerability scanner for Ruby on Rails applications
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:61 commits, 3 PRs, 17 comments in 4 years 4 months
Contributions summary:Neil primarily contributed to the security auditing and analysis capabilities of the Brakeman tool. They fixed bugs related to rescanning files and made improvements to the send method check, ensuring user input is handled safely. Their work also included the addition and modification of test cases, and the refinement of the reporting features, including conversions to modern formats like erb and Terminal::Tables.
security-vulnerabilitysecurity-toolsbrakemanvulnerabilitiesvulnerability-scanner
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.