Rahul Zhade
Staff Product Security Engineer at GitHub
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolRahul Zhade is a Staff Product Security Engineer at GitHub with nine years of experience securing applications, shaping security standards, and automating vulnerability workflows. He led product security for Copilot, cutting review timelines from weeks to under a week and built internal standards and tooling (CodeQL, tfsec, Brakeman) that regularly surface actionable findings. Rahul combines hands-on development—authored Rails and Go systems to manage vulnerability lifecycles and detect threats—with deep code review and architecture risk assessment experience, including acquisition security reviews for npm. An active open-source contributor, he improved quality and test coverage on high-profile projects like rubygems.org and enhanced URL reconnaissance tooling to be platform-agnostic and archive-aware. Based in New York and educated at Georgia Tech, he blends practical engineering with program-level security leadership to make security a fast, developer-friendly part of product delivery.
9 years of coding experience
6 years of employment as a software developer
Bachelor's degree, Computer Science, Bachelor's degree, Computer Science at Georgia Institute of Technology
French, Hindi, Kannada, Marathi, English
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (19)
rubygems10
testing10
capybara10
ruby10
go10
file-handling10
strings9
system-testing9
text-manipulation9
package-manager-tool9
test-automation9
package-manager9
xml-parsing8
security7
reconciliation6
Programming languages (19)
Github contributions (5)
utkusen/urlhunter
Nov 2020 - Sep 2022
a recon tool that allows searching on URLs that are exposed via shortener services
Role in this project:
Back-end Developer
Back-end DeveloperContributions:12 commits, 3 PRs, 4 comments in 1 year 10 months
Contributions summary:Rahul primarily focused on enhancing the functionality of the URL hunter tool. They implemented the ability to process different archive types, including ZIP and XZ archives. They also refactored code to use `filepath.Join` for platform-agnostic path handling and improved matching logic within the search function. Additionally, the user incorporated the `beaconspec` library for parsing and logging the short URL.
urlsshortenerurl-parserrecon-toolbugbounty
rubygems/rubygems.org
Oct 2021 - Nov 2021
The Ruby community's gem hosting service.
Role in this project:QA Engineer / Test Automation Engineer
QA Engineer / Test Automation EngineerContributions:5 commits, 1 PR in 8 days
Contributions summary:Rahul focused on enhancing the advanced search functionality of the rubygems.org repository. They added integration tests to verify the behavior of the advanced search form, specifically ensuring that pressing the Enter key in any field submits the form correctly. Furthermore, the user addressed a missing assertion in one of the tests and fixed existing test issues. These contributions aim to improve the quality and reliability of the search feature.
ruby-on-railshostingrubygemsrailsruby
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.