Oliver Chang
Software Engineer, Tools And Infrastructure at Google
Addison, Texas, United States
Summary
🤩
Rockstar🎓
Top SchoolOliver Chang is a Senior Staff software engineer specializing in tools and infrastructure with 13 years of experience building secure, scalable developer-facing systems. Now at Google DeepMind, he focuses on AI for code security and has a track record founding OSV.dev and co-founding OSS-Fuzz—projects widely used for open-source vulnerability tracking and continuous fuzzing. His work spans backend, DevOps, and automation: improving supply-chain security checks in OpenSSF Scorecard, enhancing OSV import pipelines, and hardening ClusterFuzz and OSS-Fuzz infrastructure. Trained as an architectural engineer and with an MS in software engineering, he combines systems thinking with practical build-and-deploy expertise, often turning fuzzing and SBOM parsing challenges into production-ready tooling. Based in Addison, Texas and returning to Seattle soon, he brings a rare mix of open-source stewardship and deep operational know-how in security-focused developer tools.
13 years of coding experience
3 years of employment as a software developer
Master of Science (MS), Computer Software Engineering, Master of Science (MS), Computer Software Engineering at The University of Texas at DallasBachelor of Science (BS), Architectural Engineering, 3.7, Bachelor of Science (BS), Architectural Engineering, 3.7 at The University of Texas at Austin
Github Skills (40)
openssf10
google-cloud-platform10
docker10
python10
vulnerability-scanners10
redis10
security-txt10
audit10
sbom10
bash10
dockers10
cicd10
gcp10
security10
vulnerability-assessment10
Programming languages (17)
Github contributions (5)
google/osv.dev
Jan 2021 - Jan 2023
Open source vulnerability DB and triage service.
Role in this project:
Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:18 releases, 1327 reviews, 339 commits in 2 years
Contributions summary:Oliver primarily contributed to the project's backend infrastructure and associated tooling. Their work involved making changes to the build process using Protoc, modifying deployment scripts for App Engine, and adding a linting action with Pylint and Yapf. They also updated the OSV schema and implemented improvements to the import pipeline for OSS-Fuzz vulnerabilities, including handling database connections, implementing, and managing various facets of the project’s deployment and maintenance.
security-toolsopenvasvulnerability-managementsecurityvulnerability-detection
google/clusterfuzz
Jan 2019 - Jan 2023
Scalable fuzzing infrastructure.
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:12 releases, 1496 reviews, 737 commits in 4 years
Contributions summary:Oliver's contributions primarily focused on enhancing the project's infrastructure, build automation, and back-end functionality. They implemented a linting and formatting process for Python and Go code, and set up a new Google Cloud Memorystore Redis instance to replace the App Engine memcache. The user also worked on setting up the Python 3 development environment and resolved multiple build-related issues for both the local and CI environments, as well as improved the build system by automating job weighting and allowing for external infrastructure support.
scalablevulnerabilitiessecurityinfrastructurefuzzing
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.