l
lofty666

LOFTY

@lofty666

security engineer

Chine
Anglais
Certaines informations sont présentées en anglais.
À propos de moi
I'm a security engineer with 5+ years of experience in application security, specializing in automated code auditing and vulnerability detection. I built my own multi-language security scanner that combines CodeQL, AST taint tracking, and Semgrep to detect OWASP Top 10 vulnerabilities including SQL Injection, XSS, Path Traversal, and Command Injection.... Plus d’infos

Compétences

l
lofty666
LOFTY
hors ligne • 

Voir mes services

révision du code
I will audit your code for security vulnerabilities in 10 languages

Expérience professionnelle

Tencent_Holdings

Security Engineer

Tencent Holdings • Freelance

Jul 2026 - Present1 mo

Built a multi-language security scanner from scratch, combining CodeQL, AST taint tracking, and Semgrep. Validated on OWASP Benchmark with 94.9% Java detection rate and 100% for 8 other languages. Scanned Kubernetes (5.3M lines) and VS Code (1.3M lines) in under 10 minutes. Deliver zero-false-positive vulnerability reports with fix code.