l
lofty666

LOFTY

@lofty666

security engineer

China
Engels
Sommige informatie wordt in het Engels weergegeven.
Over mij
I'm a security engineer with 5+ years of experience in application security, specializing in automated code auditing and vulnerability detection. I built my own multi-language security scanner that combines CodeQL, AST taint tracking, and Semgrep to detect OWASP Top 10 vulnerabilities including SQL Injection, XSS, Path Traversal, and Command Injection.... Lees meer

Skills

l
lofty666
LOFTY
offline • 

Bekijk mijn diensten

Code review
I will audit your code for security vulnerabilities in 10 languages

Werkervaring

Tencent_Holdings

Security Engineer

Tencent Holdings • Freelance

Jul 2026 - Present1 mo

Built a multi-language security scanner from scratch, combining CodeQL, AST taint tracking, and Semgrep. Validated on OWASP Benchmark with 94.9% Java detection rate and 100% for 8 other languages. Scanned Kubernetes (5.3M lines) and VS Code (1.3M lines) in under 10 minutes. Deliver zero-false-positive vulnerability reports with fix code.