Oren Evron
Israel
Summary
🤩
RockstarOren Evron is a senior product management professional and security-focused engineer based in Israel with nine years of experience delivering secure, cloud-native solutions. He blends product strategy with hands-on security engineering, contributing practical checks to the widely used open-source project Checkov to prevent cloud misconfigurations across AWS, Azure, and container images. Oren’s work touches many services—from RDS and DynamoDB to Azure App Services and Front Door—showing a depth in securing both infrastructure-as-code and runtime artifacts. Known for translating complex security requirements into automated, build-time safeguards, he operates at the intersection of product, dev, and security teams. Colleagues rely on him to balance user needs with rigorous compliance and deployable controls that reduce risk without slowing delivery.
9 years of coding experience
German, English, Hebrew
Stackoverflow
1reputation
419reached
0answers
1question
Github Skills (15)
infrastructure-as-code10
terraformer10
azure10
static-analysis10
cloud-security10
aws10
microsoft-azure10
terraform10
python9
kubernetes-pods7
kubernetes7
java6
compilation6
package6
ubuntu6
Programming languages (10)
Github contributions (5)
bridgecrewio/checkov
Mar 2021 - Jul 2022
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Role in this project:
Security Engineer
Security EngineerContributions:31 commits, 4 PRs, 5 pushes in 1 year 4 months
Contributions summary:Oren primarily contributed by adding and modifying security checks within the Checkov framework. Their commits involve implementing new checks and modifying existing ones to identify and prevent cloud misconfigurations, specifically focusing on AWS resources. These changes include checks related to ensuring secure configurations for services such as SageMaker, Redshift, ElasticCache, DynamoDB, RDS, Secrets Manager, ECR, AKS, Azure App Services, Azure Data Explorer, API Management, and Azure Front Door.
gcppolicy-as-codecomplianceaws-securityaws
orevron/terragoat
Apr 2020 - Dec 2024
A Vulnerable Terraform infrastructure
Contributions:2 reviews, 701 PRs, 183 pushes in 4 years 8 months
terraformvulnerableinfrastructureaws
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.