Xiaofan Zhang
Software Engineer (Security Research) at Palo Alto Networks
California, United States
Summary
👤
Senior🎓
Top SchoolXiaofan Zhang is a software engineer specializing in security research with 11 years of experience and current role at Palo Alto Networks. OSCP- and AWS-certified, they bridge hands-on bug bounty hunting, code review, and formal AppSec practices—bringing practical penetration testing skills informed by a deep understanding of OWASP Top 10 and secure SDLC tooling. A Northeastern MS in Cybersecurity graduate with near-perfect GPA, Xiaofan has taught network security and contributed to real-world security pipelines at Bitsight and Dana, working across DAST/SAST, GitLab CI/CD, containers, and Kubernetes. Known for a curious, practitioner-focused approach, they often translate offensive findings into actionable engineering fixes and best-practice guidance that teams can adopt.
11 years of coding experience
1 year of employment as a software developer
Master of Science - MS, Cybersecurity, 3.958/4.0, Master of Science - MS, Cybersecurity, 3.958/4.0 at Northeastern UniversityBachelor of Science - BS, Statistics, 3.51/4.0, Bachelor of Science - BS, Statistics, 3.51/4.0 at The Chinese University of Hong Kong, Shenzhen
Github Skills (24)
foundationdb10
oltp10
postgresql10
mysql10
tidb10
analytics10
scale10
go10
embeddable10
sql10
distributed-transactions10
serverless10
raft10
elastic10
cloud-native10
Programming languages (4)
Github contributions (5)
asiafrank/project-gen
May 2015 - Jun 2019
A springmvc-mybatis-freemarker project generator.
Contributions:43 pushes, 2 branches, 1 tag in 4 years 1 month
freemarkerspringmvcspringmvc-mybatisspringlombok
daydayups/h5-demo
Apr 2015 - Jul 2016
Contributions:105 commits, 9 pushes, 1 branch in 1 year 3 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.