Thordur Bjornsson
Staff Security Engineer at Google
Garðabær, Iceland
Summary
👤
SeniorThordur Bjornsson is a Staff Security Engineer with 13 years of hands-on experience building and hardening infrastructure, operating systems, network protocols, and secure backend services. Currently at Google after progressive security roles there since 2018, he combines deep kernel and OS-level expertise from years as an OpenBSD kernel developer with applied product security work at Yubico and cloud-scale incident response. He has a strong track record improving build and deployment security—contributing DevOps fixes to the Kore web framework—and hardening backend authentication and live query tooling in the popular osquery Fleet project. Known for shipping pragmatic, high-assurance solutions, Thordur brings an uncommon blend of low-level systems performance tuning and applied cryptography/distributed-systems curiosity to complex security problems. Based in Garðabær, Iceland, he often surfaces subtle operational risks before they become incidents and mentors teams to build more robust, auditable systems.
13 years of coding experience
18 years of employment as a software developer
English, Icelandic
Github Skills (27)
application-framework10
back-end-development10
app-framework10
c1110
osquery10
cicd10
c1710
go10
build-automation10
web-framework10
backend10
scripting9
security9
shell9
web-development9
Programming languages (13)
Github contributions (5)
kolide/fleet
May 2018 - Sep 2018
A flexible control server for osquery fleets
Role in this project:
Backend Developer
Backend DeveloperContributions:5 commits, 8 PRs, 7 comments in 3 months
Contributions summary:Thordur primarily contributed to the backend functionality of the "fleet" project, focusing on authentication, service setup, and live query improvements. They implemented validation for JWT tokens within the authentication middleware and added checks to ensure email and passwords are set during the setup process. Their work included improvements to the fleetctl query tool, specifically regarding handling of host responses and output formatting.
host-instrumentationmacadminsecurityinfosecosquery
jorisvink/kore
Nov 2013 - May 2015
An easy to use, scalable and secure web application framework for writing web APIs in C or Python. || This is a read-only mirror, please see https://kore.io/mail and https://kore.io/source for information on how to contribute via the mailing lists.
Role in this project:DevOps Engineer
DevOps EngineerContributions:21 commits, 13 PRs, 8 comments in 1 year 6 months
Contributions summary:Thordur primarily focused on improving the build and deployment process of the Kore web framework. They introduced a script for generating certificates, simplified environment variable usage, and addressed issues related to file permissions and configurations. The user also implemented changes to the core build scripts and server configuration, enhancing security and streamlining the deployment procedure.
pythonmailingweb-applicationsecuretls
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.