About
As a Principal Product Security Engineer at GitHub, Greg drives the direction of critical product security work and initiatives. From starting with a secure design and architecture all the way to how GitHub performs incident response and remediation, his focus is on building and maturing the way GitHub holistically develops software securely. Greg’s recent focus has been on driving secure-by-design and secure-by-default principles to reduce the risk of GitHub’s products for users and the open source ecosystem. Previously, as a Senior Director of Product Security Engineering at GitHub, Greg led the teams that empower engineers to design and build secure products, deliver tooling to prevent security vulnerabilities early in the software lifecycle, and respond to and mitigate vulnerabilities throughout the Security Development Lifecycle. Greg has over 19 years of deep application and product security experience, ranging from hands-on network and application penetration testing, in-depth security code audits, and vulnerability research to teaching software security assessment techniques both to enterprises and as a professor at DePaul University.