Thomas Shadwell
Member Of Technical Staff, Security at OpenAI
San Francisco, California, United States
Summary
🤩
RockstarThomas Shadwell is a security-focused software engineer with 11 years of experience building secure systems at scale, currently a Member of Technical Staff, Security at OpenAI. He designed OpenAI’s first Secure Development Lifecycle and core authN/authZ primitives for products like ChatGPT Canvas, and has tackled AI-specific threats such as prompt injection and agentic security. Previously he led hardening and static analysis work at Google (including disclosures like CVE-2022-41034) and founded Twitch’s security team, where he architected critical auth systems and sandboxed platforms. His work at the UK NCSC helped establish a government-wide vulnerability disclosure program, reflecting a rare mix of offensive research, policy impact, and production engineering. Known for turning security research into deployable defenses, he blends deep systems knowledge with practical threat mitigation across web, cloud, and AI platforms.
12 years of coding experience
11 years of employment as a software developer
English
Github Skills (200)
programming-language10
parser10
clientside10
security10
earley-parser10
javascript10
nearley10
editor10
minification10
api10
golang10
monorepo10
scalable10
electron10
typescript10
Programming languages (19)
Github contributions (5)
Zemnmez/go-protobuf-marshalable-enums
Sep 2019 - Dec 2022
project to make enums (json) marshalable in go protobuf implementations
Contributions:1 PR, 3 pushes, 2 branches in 3 years 3 months
golangimplementationsprotocol-buffersprotobufgo
Zemnmez/create-react-app-z-template
Jul 2019 - Dec 2022
git repo for the template for create-react-app-z
Contributions:1 PR, 5 pushes, 2 branches in 3 years 5 months
reacttemplatecreate-reactgit-repocreate-react-app
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.