Paul Deardorff
Software Engineering Manager at hobbyDB
San Francisco, California, United States
Summary
👤
Senior🎓
Top SchoolPaul Deardorff is a software engineering manager in San Francisco with 12 years of experience building products and security-focused systems from the ground up. He rose through technical ranks at Rapid7—from security researcher to lead engineer and now manager—demonstrating a blend of hands-on coding, threat analysis, and people leadership. His open-source security work includes contributions to Brakeman, improving static analysis for Ruby on Rails and tightening checks for mass-assignment and SQL injection vectors. Paul pairs startup and advisory experience (including a CEO stint and ongoing technical advisory roles) with formal business training from UC Berkeley Haas, enabling him to bridge product, engineering, and business priorities. Known for shipping pragmatic, auditable solutions, he thrives at the intersection of application development and security assurance. Colleagues would describe him as a builder who pulls both technical and organizational levers to deliver secure, maintainable software.
12 years of coding experience
12 years of employment as a software developer
Haas Business Management, Haas Business Management at University of California, BerkeleyChaminade High School
English, German, Spanish
Github Skills (8)
ruby10
brakeman10
ruby-rails10
vulnerabilities10
rails10
static-analysis10
security10
testing9
Programming languages (4)
Github contributions (5)
presidentbeef/brakeman
Jul 2013 - Jul 2013
A static analysis security vulnerability scanner for Ruby on Rails applications
Role in this project:
Security Engineer
Security EngineerContributions:9 commits in 9 days
Contributions summary:Paul primarily contributed to improving the security analysis capabilities of Brakeman, a static analysis security vulnerability scanner for Ruby on Rails applications. Their work involved identifying and addressing mass assignment vulnerabilities, specifically by adding checks for dangerous attributes defined in `attr_accessible`. They also updated the vulnerability type classifications and added tests to validate these checks within the context of a specific Rails version. Further contributions include modifications to the SQL injection checks.
security-vulnerabilitysecurity-toolsbrakemanvulnerabilitiesvulnerability-scanner
asm-products/zenforms
Oct 2014 - Jan 2015
Contributions:36 commits, 2 PRs, 8 pushes in 2 months
as-a-servicelegal
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.