Timur Duehr
Principal Security Consultant at NCC Group North America
Batavia, Illinois, United States
Summary
🤩
Rockstar🎓
Top SchoolTimur Duehr is a Principal Security Consultant with 17 years of hands-on experience in penetration testing, security tool development, and back-end engineering. Based in Batavia, Illinois, he blends deep language expertise—authoring and reviewing Ruby, C/C++, and Java while reading a wide spectrum from Python to Erlang—with a rigorous MS in Mathematics. He has progressed through roles at Matasano and NCC Group, leading complex assessments and building tooling that scales across enterprise environments. An active open-source contributor, Timur has made substantive testing and FFI improvements to high-profile projects like JRuby and the Ruby FFI library, showing attention to cross-platform correctness and performance. He’s equally comfortable fixing subtle JVM/Ruby interoperability bugs and implementing ticket caching for single-sign-on systems, reflecting both low-level systems acumen and practical enterprise impact. Colleagues describe him as a pragmatic problem solver who turns deep technical knowledge into reliable, auditable security outcomes.
17 years of coding experience
12 years of employment as a software developer
MS Mathematics, MS Mathematics at University of Illinois ChicagoAssociates in General Studies General, Associates in General Studies General at College of DuPage
Github Skills (22)
c1110
cffi10
java10
ruby10
c1710
apache-ignite10
javas10
foreign10
ffi10
spring-boot10
dynamic-library10
test-automation10
web-application9
rspec9
webapp9
Programming languages (14)
Github contributions (5)
ffi/ffi
Jan 2014 - Jun 2021
Ruby FFI
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1 review, 150 commits, 74 PRs in 7 years 5 months
Contributions summary:Timur contributed to the Ruby FFI library, focusing on low-level system interactions. They implemented and corrected the inclusion of RTLD constants at compile time, improving the library's ability to interact with dynamic libraries. Furthermore, they refactored specs, ensuring compatibility with JRuby and using rspec syntax, demonstrating expertise in testing and cross-platform support. Additionally, the user updated and corrected the benchmarks used to evaluate the library's performance.
rubyffisketchupruby-ffijruby
apereo/cas
Sep 2015 - Feb 2019
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Role in this project:Back-end Developer
Back-end DeveloperContributions:423 commits, 185 PRs, 684 pushes in 3 years 5 months
Contributions summary:Timur primarily contributed to the Apereo CAS project by addressing specific issues related to password expiration warnings and integrating support for Apache Ignite ticket caching. Their work involved modifying existing JSP files within the web application to fix redirect loops and implementing new Java classes within the Ignite integration to enhance ticket caching capabilities. Additionally, the user refactored the code by folding AbstractCrypticTicketRegistry up to AbstractDistributedTicketRegistry.
signwebssoapereoapache2identity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.