Scott Finlay
Senior Staff Software & Security Engineer at SIXT
Munich, Bavaria, Germany
Summary
👤
Senior🎓
Top SchoolScott Finlay is a Senior Staff Software & Security Engineer with a decade of experience building and securing large-scale, Go-based microservice platforms from Munich. He combines hands-on backend engineering (Golang, PHP, SQL) with application security leadership—designing threat models, automated scanners, and CI/CD-integrated controls while mentoring engineering leaders through complex designs. At Sixt he architected customer-facing APIs and Fastlane checkout systems, led security teams, and contributed retry-enhancements to a notable open-source Go microservices framework. Comfortable operating across the stack, he emphasizes performance, concurrency, and pragmatic secure-by-design practices informed by early work in retail and media. Beyond engineering, he’s an accomplished published fiction author, bringing creative problem solving and clear communication to technical strategy.
10 years of coding experience
14 years of employment as a software developer
Bachelor of Science (B.S.) Computer Science, Bachelor of Science (B.S.) Computer Science at University of Minnesota
Stackoverflow
86reputation
15kreached
9answers
2questions
Github Skills (14)
microservices-application10
rpc10
go10
microservices10
distributed-systems9
golang9
facebook-share6
php6
model-view-controller6
facebook-open-graph6
laravel6
routes6
javascript6
symfony6
Programming languages (3)
Github contributions (5)
micro/go-micro
Nov 2016 - Nov 2016
A Go agent harness and service framework
Role in this project:
Back-end Developer
Back-end DeveloperContributions:6 commits, 2 PRs, 7 comments in 4 days
Contributions summary:Scott primarily focused on enhancing the retry mechanism within the Go microservices framework. They added the ability to customize the retry logic, including a function to determine if a call should be retried, and adjusted the arguments and return value of the retry function. These modifications involved changes to core client components and also included refactoring related to naming conventions. The work extends to adding retry logic to streaming calls as well.
gogolangmicroservicesdistributed-systemsai
ynori7/credential-detector
Aug 2021 - Jul 2022
An easy-to-use and highly configurable tool that allows you to scan projects to detect potentially hard-coded credentials.
Contributions:51 commits, 1 PR, 68 pushes in 11 months
credentialsdevsecopsdynamic-analysislinterpentesting
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.