Paul Malmsten
Principal Software Engineer at Microsoft
Seattle, Washington, United States
Summary
👤
Senior🎓
Top SchoolPaul Malmsten is a Principal Software Engineer with 16 years of experience designing and operating large-scale, secure cloud services, currently focused on hardening the open-source software supply chain at Microsoft. He has a strong track record at Microsoft and AWS building resilient backend platforms, driving cross-org initiatives (including company-wide onboarding campaigns and compliance with the EU Cyber Resilience Act), and leading efforts to find and detonate malware in OSS packages before they reach engineers. Paul combines deep distributed-systems and backend expertise with pragmatic security engineering—mentoring teams on secure development, coordinating penetration testing, and proactively shifting defenses left using AI prototyping. He is adept at shipping infrastructure that improves developer productivity and business continuity (for example, an internal Go module proxy and cost-cutting launch automation), and brings a hands-on, systems-first mindset rooted in early robotics and IoT work. Based in Seattle, he pairs technical leadership with an investigative curiosity about attacker behavior and supply-chain threats that informs practical, measurable protections.
16 years of coding experience
14 years of employment as a software developer
Bachelor of Science - BS, Computer Science, Bachelor of Science - BS, Computer Science at Worcester Polytechnic Institute
Github Skills (76)
windows10
wpf10
cscore10
hal10
xbee10
to-do9
python9
wrench9
desktop9
color-picker9
depth-camera9
exploit9
bundle8
sdk8
launchpad8
Programming languages (8)
Github contributions (5)
pmalmsten/tension-wrench
Oct 2021 - Jan 2023
Tension Wrench is an interactive security brainstorming guide website that helps software engineers brainstorm things attackers might try to do to exploit a software system and ways to defend against them.
Contributions:145 commits, 107 PRs, 221 pushes in 1 year 3 months
securityto-dowrenchbrainstormsystem-software
pmalmsten/cosmosdb-extensions-sessiontokens-aspnet
Nov 2022 - Feb 2025
Cosmos DB extensions for managing session tokens with ASP.NET
Contributions:8 releases, 42 PRs, 28 pushes in 2 years 3 months
dotnettokensaspcosmos-dbasp-net
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.