Sajjad Arshad
Senior Security SWE at Google
San Jose, California, United States
Summary
🤩
Rockstar🎓
Top SchoolSajjad Arshad is a Senior Security Software Engineer based in San Jose with nearly a decade of hands-on experience building large-scale abuse detection and static/dynamic analysis systems for Android at Google. He blends low-level C/C++ expertise—demonstrated by contributions to the well-regarded how2heap heap-exploitation repo—with machine learning for classification and clustering to harden app ecosystems and detect adversarial malicious code. His background spans academic research (instrumenting Chromium, large-scale crawlers on AWS) to industry-grade CI/CD and Google-scale production systems, and he teaches and designs challenges for GoogleCTF and DEFCON. Comfortable across languages and platforms, he has a PhD-level focus in cybersecurity and a track record of turning deep research into practical defenses for billions of users.
8 years of coding experience
13 years of employment as a software developer
PhD Cybersecurity, PhD Cybersecurity at Northeastern UniversityMS Computer Engineering, MS Computer Engineering at Shahid Beheshti UniversityBS Computer Engineering, BS Computer Engineering at University of Tehran
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (12)
c1710
memory-management10
vulnerabilities10
exploit10
exp10
heap-dump10
security-vulnerability10
heap10
c1110
glibc10
vulnerability10
git7
Programming languages (3)
Github contributions (5)
shellphish/how2heap
Sep 2018 - Oct 2018
A repository for learning various heap exploitation techniques.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:7 commits, 1 PR, 5 comments in 15 days
Contributions summary:Sajjad contributed to the `how2heap` repository by adding and modifying C code examples focused on heap exploitation techniques. Their work includes implementing a large bin attack, demonstrating vulnerabilities and exploitation methods related to memory management within the glibc library. The user's changes involve detailed explanations and comments, enhancing the educational value of the examples for understanding heap exploitation. They also added a gitignore file and corrected the glibc build script.
heaptechniquesexploitation
sajjadium/ctf-writeups
May 2018 - Apr 2020
Contributions:248 commits, 277 pushes, 1 branch in 1 year 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.