Victor Hora
Senior Security Consultant at NCC Group
Waterloo, Ontario, Canada
Summary
🤩
Rockstar🎓
Top SchoolVictor Hora is a Senior Security Consultant with over a decade of hands-on experience across security consulting, threat intelligence, forensics, systems hardening, and penetration testing for both commercial and government clients. Based in Waterloo, Ontario, he currently focuses on web, mobile, and infrastructure assessments at NCC Group while also co-maintaining the well-known open-source ModSecurity web application firewall. His contributions to ModSecurity include deep enhancements to its rule language and logging, demonstrating a rare blend of low-level parsing work and practical defensive tooling. Victor’s background spans leading global research teams, building WAF signatures, and reverse-engineering hardware, which gives him an ability to connect high-level threat modeling to concrete detection and mitigation controls. He’s equally comfortable writing secure configurations and diving into exploit research, and his career shows a consistent thread of turning research findings into operational protections.
10 years of coding experience
9 years of employment as a software developer
Associate's Degree, Computer and Information Sciences, Networks and Internet, Associate's Degree, Computer and Information Sciences, Networks and Internet at Universidade Salgado de Oliveira
Spanish, English, Portuguese
Github Skills (12)
parser10
c-language10
cprogramming-language10
parsing10
modsecurity10
parse10
security10
regular-expression9
json8
waf7
apache7
nginx7
Programming languages (8)
Github contributions (5)
owasp-modsecurity/ModSecurity
May 2017 - Mar 2019
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:1 release, 85 commits, 55 PRs in 1 year 10 months
Contributions summary:Victor primarily contributed to the ModSecurity web application firewall engine, focusing on enhancing the parsing and functionality of its rule language (SecLang). Their work included adding support for new transformations like hexDecode, uppercase, base64 encoding/decoding, and handling URL-encoded request bodies. They also made improvements to the RBL operator, implemented JSON logging, and fixed issues related to variable parsing.
nginxweb-applicationloggingapache2waf
victorhora/ModSecurity-nginx
Jun 2018 - Apr 2020
ModSecurity v3 Nginx Connector
Contributions:3 pushes, 2 branches in 1 year 9 months
nginxconnectormodsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.