Kai Yuan Thng

Software Engineer

Los Altos, California, United States10 yrs 5 mos experience
Most Likely To SwitchHighly Stable

Key Highlights

  • Led Instagram's migration to 100% HTTPS.
  • Authored Instagram's cookie management framework.
  • Developed authentication infrastructure for Reality Labs.
Stackforce AI infers this person is a Cybersecurity Engineer with a focus on software security and privacy.

Contact

Skills

Core Skills

SecuritySoftware DevelopmentTeachingProject Management

Other Skills

PythonHack/PHPC++Web DevelopmentPrivacy ManagementWeb SecuritySecurity InfrastructureAuthenticationAutomationSecurity ReviewsJavaInformation SecurityJavaScriptVulnerability DetectionMalware Analysis

Experience

10 yrs 5 mos
Total Experience
3 yrs 6 mos
Average Tenure
8 yrs 1 mo
Current Experience

Meta

Staff Engineer

Apr 2018Present · 8 yrs 1 mo · Menlo Park

  • I'm at the heart of Meta's security & privacy infrastructure, focusing on building frameworks and implementing foundational changes across our family of apps to deliver scaled security benefits. Here are some highlights:
  • Drove Instagram's migration to 100% HTTPS, a critical move to secure user data.
  • Authored Instagram's cookie management framework, strengthening privacy controls.
  • Enhanced Django's CSRF prevention framework, a key aspect of web security.
  • Collaborated on Trusted Types for Python in FB, an innovative approach to security.
  • Built infrastructure for securing TLS keys and led code signing security initiatives.
  • Developed authentication infrastructure for Reality Labs, enabling the rollout of Meta accounts that operate at the company level.
  • I've had the opportunity to work with technologies like Python, Hack/PHP, & C++, crafting solutions that uphold our commitment to security and privacy.
PythonHack/PHPC++SecuritySoftware Development

Facebook

Security Engineer Intern

May 2017Aug 2017 · 3 mos · Menlo Park, California

  • Developed automation to detect subdomains vulnerable to hostile takeover, allowing us to remediate them proactively.
  • Co-managed the company's Whitehat Bug Bounty program, leveraging crowdsourced ethical hackers to identify and remediate bugs.
  • Conducted security reviews to ensure our products are polished, high-quality, and shipped with minimal security vulnerabilities, reflecting our commitment to excellence.
AutomationSecurity ReviewsSecurity

Mwr infosecurity

Intern

Dec 2016Jan 2017 · 1 mo · Singapore

  • Developed a JavaScript source code analyzer that outperformed existing open-source alternatives. Using taint analysis and pattern matching, it detects vulnerabilities and security misconfigurations in NodeJS applications.
JavaScriptVulnerability DetectionSoftware Development

Fireeye, inc.

Associate Research Engineer Intern

May 2016Jul 2016 · 2 mos · Singapore

  • Enhanced the detection capability of FireEye's MVX™ engine through insights gleaned from in-depth malware analysis and research on malicious URL classification. Main technologies include IDA Pro, Wireshark, Python and WinDbg.
Malware AnalysisPythonIDA ProWiresharkSecurity

Computing for voluntary welfare organisations

Project Lead

May 2015Aug 2015 · 3 mos · Singapore

  • Led a team of 6 software engineers in the development and enhancement of case management systems for 2 voluntary welfare organizations: Care Corner Counseling Centre & Lions Befrienders Service Association Singapore. Main technologies include Ruby on Rails, Drupal 7, Ubuntu and MySQL.
Ruby on RailsDrupalMySQLProject Management

National university of singapore

Teaching Assistant

Jan 2015May 2017 · 2 yrs 4 mos · Singapore

  • Tutored CS1010FC (Programming Methodology; Python), CS2020 (Accelerated Data Structures & Algorithms; Java), CS2107 (Introduction to Information Security), and NUS Orbital (Workshop on Web Security).
PythonJavaInformation SecurityTeaching

Education

National University of Singapore

Bachelor’s Degree (Hons) — Computer Science

Jan 2014Jan 2018

Stackforce found 100+ more professionals with Security & Software Development

Explore similar profiles based on matching skills and experience