Frederik Braun

DevOps Manager

Berlin, Germany14 yrs 2 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Led security initiatives for Firefox.
Co-authored W3C web standards.
Managed a diverse remote engineering team.

Stackforce AI infers this person is a Web Security Engineer with extensive experience in security standards and team management.

Contact

Skills

Core Skills

Engineering ManagementSecurity EngineeringSecurity ResearchThreat ModelingWeb Application Security

Other Skills

Public SpeakingWeb StandardsStatic AnalysisDynamic AnalysisIntercultural CommunicationChange ManagementCross Cultural ManagementJavaScriptMentoringTeachingOpen Source DevelopmentPythonC++Rust (Programming Language)

About

Engineering Manager & Security Engineer, Builder and Breaker. Managing and growing a remote, distributed team delivering security features and new defenses. Supporting the wider org with threat modeling, fuzzing and our bug bounty program. Experienced in code audits, building new solutions. Driving security efforts that scale across departments. Co-author of W3C recommended specification Subresource Integrity.

Experience

14 yrs 2 mos

Total Experience

7 yrs 1 mo

Average Tenure

13 yrs 8 mos

Current Experience

Mozilla

6 roles

Security Engineering Manager

Promoted

Mar 2023 – Present · 3 yrs 2 mos

Delivering security defenses and product features for Firefox, while also supporting the engineering organization with threat modeling, fuzzing, bug bounty programs, and improving to industry standards (e.g., W3C). Grown a remote team of five to ten with engineers ranging from intern to principal engineer across various continents and time zones.
Selected outcomes: HTTPS-First mode, Mixed-Content upgrading, incident response at award-winning speed.

Engineering ManagementPublic SpeakingSecurity Engineering

Staff Security Engineer

Promoted

Aug 2018 – Mar 2023 · 4 yrs 7 mos

Devised and co-led strategy to prevent XSS & injection attacks in source code and at runtime using static and dynamic analysis resulting in, for example, the technical paper "Hardening Firefox Against Injection Attacks".
Tasks: Software Engineering, Code Analysis, (Co-)authoring industry standards (HTML, Fetch, Mixed Content, Sanitizer API), Threat Modeling, Vulnerability Management, Mentoring.

Security ResearchPublic SpeakingThreat ModelingWeb Standards

Country Ambassador Germany

Jun 2017 – Dec 2020 · 3 yrs 6 mos

As the Country Ambassador for Mozilla Germany, I helped shape the voice of leadership and acted as an advocate for the needs of employees in the region.

Intercultural CommunicationPublic SpeakingChange ManagementCross Cultural Management

Senior Security Engineer

Promoted

Aug 2015 – Aug 2018 · 3 yrs

Authored web-standard ”Subresource Integrity”, streamlined secure software development process for all applications in Firefox OS, introduced newly created static analysis tooling to address XSS and injection issues, implemented safe PBKDF2 password storage and user-adjustable privacy permission overrides for all apps.

JavaScriptPublic SpeakingSecurity Engineering

Security Engineer

Jan 2013 – Aug 2015 · 2 yrs 7 mos

Performed numerous security audits on web applications, led root cause analysis and remediation of vulnerability classes, and contributed to web standards
to support web application security in-house (with e.g., Content Security Policy, X-Frame-
Options).

Public SpeakingWeb Application Security