Victor Zhu
Red Team Security Engineer at Freelance | Self-Employed
Shenzhen, Guangdong Province, China
Summary
🤩
Rockstar🎓
Top SchoolVictor Zhu is a Red Team Security Engineer with 13 years of engineering experience who blends deep software back-end craftsmanship with practical offensive security expertise gained at Meta and Citi and now as a freelance red team tooling developer in Shenzhen. Trained at Rensselaer Polytechnic Institute (MS Information Security) and actively pursuing PenTest+ and OSCP, he pairs hands-on penetration testing, reverse engineering, and web-app security work with persistent CTF participation and published security research. His open-source footprint includes substantive contributions to performance-focused PHP projects like Phalcon and the Zephir language—evidence of low-level systems fluency that informs his exploit development and tooling. Known for attention to detail and persistence, he brings a rare mix of parser/kernel-level backend fixes experience and real-world offensive operations, making him effective at finding and automating subtle, systemic vulnerabilities.
13 years of coding experience
2 years of employment as a software developer
Master of Science - MS Information Technology - Information Security, Master of Science - MS Information Technology - Information Security at Rensselaer Polytechnic Institute
English, Chinese, Spanish, French
Github Skills (27)
phalcon10
postgresql10
back-end-development10
c1110
object-oriented-programming10
c1710
php-framework10
php10
model-view-controller10
developer-tools10
zephir10
api-design9
php-internals9
database-design9
php-extension9
Programming languages (14)
Github contributions (5)
phalcon/cphalcon
Jun 2013 - Sep 2019
High performance, full-stack PHP framework delivered as a C extension.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1589 commits, 47 PRs, 113 comments in 6 years 3 months
Contributions summary:Victor made significant contributions to the Phalcon PHP framework's core functionality, specifically enhancing the `Phalcon\Http\Request` and `Phalcon\Mvc\Model` components. The commits indicate the addition of new parameters in methods, modification of existing methods, and implementation of new features, improving the framework's capabilities. Furthermore, the user was involved in bug fixes.
full-stackphpframeworkphalconphp-extension
zephir-lang/zephir
Apr 2014 - May 2021
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
Role in this project:Back-end Developer
Back-end DeveloperContributions:1 review, 101 commits, 65 PRs in 7 years 2 months
Contributions summary:Victor primarily contributed to the Zephir language's core codebase, focusing on bug fixes and feature enhancements related to class methods, operators, and array handling. They demonstrated a strong understanding of the language's internal workings by modifying code in the parser, kernel, and various backend implementations. The contributions addressed issues related to static property assignment and the handling of ArrayAccess in Zephir.
skeletonphpphp-extensionshigh-levelphalcon
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.