Ondrej Moriš
Principal QA Engineer at Red Hat
Brno, Southeast, Czechia
Summary
🤩
Rockstar🎓
Top SchoolOndrej Moriš is a Principal QA Engineer with 16 years of experience securing and hardening Linux distributions, currently driving QA for security components of Red Hat Enterprise Linux from Brno. He is a specialist in cryptography, IPsec, kernel and userspace auditing, and led FIPS 140 and Common Criteria test automation efforts that underpin formal certifications. Ondrej blends deep systems-level testing with hands-on development—contributing to notable open-source projects like OpenSCAP and tlsfuzzer where he implemented CPE test engines and expanded TLS keyexchange and signature algorithm coverage. Colleagues rely on him as a subject-matter expert for security certification and audit quality engineering, with a track record of translating rigorous standards into automated, reproducible test suites. His background in academic research and participation in programs like Google Summer of Code reflects a persistent focus on algorithmic rigor and open collaboration.
16 years of coding experience
2 years of employment as a software developer
Mobile Phone Programming, Mobile Phone Programming at Aalborg UniversityRNDr. (Advanced Master), Computer Science, RNDr. (Advanced Master), Computer Science at Masarykova univerzitaMath, Computer Science, Math, Computer Science at Spring School on CombinatoricsBachelor, Applied Informatics, Bachelor, Applied Informatics at Masaryk University
Github Skills (20)
ssl10
tls1210
python10
testing10
test-framework10
c1110
tls1310
c1710
mtls10
libtls10
cp10
fuzzer10
test-automation10
cap9
openscap9
Programming languages (7)
Github contributions (5)
OpenSCAP/openscap
Nov 2009 - Sep 2011
NIST Certified SCAP 1.2 toolkit
Role in this project:
Back-end Developer & Test Automation Engineer
Back-end Developer & Test Automation EngineerContributions:42 commits in 1 year 10 months
Contributions summary:Ondrej implemented a new testing engine and CPE functionality within the `openscap/openscap` repository, as evidenced by the commit messages and code changes in `tests/CPE/test_cpelang.c` and other test files. The contributions focus on creating and updating tests related to the CPE (Common Platform Enumeration) module. The code demonstrates the user's work on testing various aspects, including parsing, importing, and exporting data, along with code modifications related to the OVAL tests.
nistdata-streamxccdfovalsecurity
tlsfuzzer/tlsfuzzer
Jun 2019 - Nov 2019
SSL and TLS protocol test suite and fuzzer
Role in this project:Security Engineer
Security EngineerContributions:16 reviews, 5 commits, 5 PRs in 5 months
Contributions summary:Ondrej primarily contributed to the testing framework of the repository, focused on enhancing TLS/SSL protocol testing capabilities. They added support for (EC)DHE key exchange to several test scripts, demonstrating a focus on key exchange mechanisms. The user also extended signature algorithms tests to include RSA-PSS and ed25519/ed448 signature algorithms, improving the comprehensiveness of security checks. They made further contributions to improve test coverage of the protocol.
security-vulnerabilitytesting-toolsdrowntlslitetest-automation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.