Stephen Aghaulor
Staff Product Security Engineer at Twilio
Barcelona, Catalonia, Spain
Summary
🤩
Rockstar🎓
Top SchoolStephen Aghaulor is a Staff Product Security Engineer in the San Francisco Bay Area with 12 years of experience blending software engineering and application security across Ruby on Rails, Go, Python, and cloud platforms. He has led appsec programs, secure design reviews, and developer training while building security features and services and advising on SAML, OAuth2/OIDC, and threat modeling. Stephen’s hands-on background ranges from cloud operations and CI automation to improving encryption libraries—contributing bug fixes and stronger salt generation to the widely used attr_encrypted project. Comfortable operating at both code and product levels, he helps shape security roadmaps, supports incident response and audits, and brings Unix/Linux networking expertise to complex distributed systems. His unusual mix of philosophy graduate training and long-term operational experience gives him a thoughtful, systems-oriented approach to risk and developer-centered security.
13 years of coding experience
11 years of employment as a software developer
Bachelors, Philosophy, Bachelors, Philosophy at Wayne State University
Spanish, English, Portuguese
Stackoverflow
140reputation
7kreached
5answers
0questions
Github Skills (16)
ruby10
activerecord10
encryption10
testing10
databases8
data-storage8
database8
csrf6
devise6
docker6
php6
autocorrect6
paperclip6
amazon-s36
mysql6
Programming languages (11)
Github contributions (5)
attr-encrypted/attr_encrypted
Dec 2014 - Dec 2018
Generates attr_accessors that encrypt and decrypt attributes
Role in this project:
Back-end Developer
Back-end DeveloperContributions:154 commits, 77 PRs, 80 pushes in 4 years
Contributions summary:Stephen primarily focused on improving the core functionality of the `attr_encrypted` library, which is designed to encrypt and decrypt attributes. Their contributions involved refactoring compatibility tests and addressing bootstrapping issues related to database connections. Furthermore, the user made several enhancements, including improving salt strength, updating how salts are generated, and fixing issues with the ActiveRecord adapter to correctly handle attribute changes within a database.
encryptionencryptdecryptaccessors
saghaulor/todo_security
Jan 2019 - Aug 2023
A tiny todo app in written in Rails featuring deliberate security vulnerabilities intended as a training tool
Contributions:6 pushes, 2 branches in 4 years 7 months
railssecurityvulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.