Nicholas Boucher
Principal Security Engineer Lead at Microsoft
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolNicholas Boucher is a Principal Security Engineer Lead at Microsoft with 11 years of experience bridging academic research and production security for critical financial systems. He holds a PhD from the University of Cambridge and a CS degree from Harvard, and his work spans cybersecurity and AI systems with a focus on practical, auditable defenses. At Microsoft he progressed rapidly through engineering and security leadership roles, driving threat modeling and secure engineering across large-scale services. An active researcher and coder, he contributed notable proof-of-concept implementations for the widely discussed "Trojan Source" vulnerability across many languages, combining deep protocol knowledge with full-stack delivery. Based in New York, he pairs rigorous academic training with hands-on engineering to reduce real-world risk in complex, high-stakes environments.
11 years of coding experience
11 years of employment as a software developer
Doctor of Philosophy - PhD Computer Science, Doctor of Philosophy - PhD Computer Science at University of CambridgeBachelor's degree Computer Science, Bachelor's degree Computer Science at Harvard UniversityHigh School Diploma, High School Diploma at Villa Madonna Academy
English, Spanish, Latin
Github Skills (19)
javascript10
c-language10
python10
vulnerability10
c1110
java10
security10
c1710
javas10
security-vulnerability10
go10
unicode10
dotnet-core10
html10
vulnerabilities10
Programming languages (10)
Github contributions (5)
nickboucher/trojan-source
Jun 2021 - Oct 2022
Trojan Source: Invisible Vulnerabilities
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:67 commits, 4 PRs, 21 pushes in 1 year 3 months
Contributions summary:Nicholas primarily contributed to the implementation of proof-of-concept (POC) code, demonstrating the "Trojan Source" vulnerability across multiple programming languages. The contributions include code modifications in C, C++, Python, C#, JavaScript, Go, Java and Rust, which showcase the vulnerability's widespread impact. Additionally, the user added visualizations with HTML files to highlight the code reordering techniques and added website elements such as descriptions and links to a research paper.
vulnerabilitiessecuritytrojan
nickboucher/imperceptible
Jan 2021 - Jan 2023
Bad Characters: Imperceptible NLP Attacks
Contributions:74 commits, 2 PRs, 15 pushes in 2 years
nlpbadmachine-learningnatural-language-processingattacks
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.