Jeff Dileo

WORK HISTORY

EDUCATION

ABOUT JEFF DILEO

Sr. Staff Security Researcher leading a vulnerability research team at Google. Previously a Product Security Research leader at ServiceNow, and Technical Director and Research Director at NCC Group (formerly iSEC Partners).Over a decade of experience specializing in application security and privacy, and regularly assessing web applications, mobile applications and mobile device firmware, embedded platforms, containerization and orchestration systems, and privileged code of all kinds.Interested in advancing the state of security for all, and developing systematic and complete fixes andsecurity improvements at scale.Highly experienced researcher who has published open source tools, whitepapers, technical blog posts,and security advisories, and regularly presents research at conferences including DEF CON, ToorCon,RECON, and Chaos Communication Congress, covering a wide range of topics including Android andJava bytecode instrumentation, scriptable debugging, and eBPF and unikernel security.Has managed external vulnerability disclosure programs, focusing on remediation and fair dealing.Passionate leader, technical lead, and mentor to others, dedicated to helping others grow their technicaland non-technical abilities through research, projects, presentations, and training.Extensive experience in performing code reviews of large codebases written in programming languagessuch as C (89, 99, 11+), C++(98, 03/TR1, 11+), Go, Java (5-11+), JavaScript, Python (2, 3), Ruby(1.8-3.x), and Rust, among others.Has created and given training on code and system instrumentation across a variety of platforms, andregularly trained new hires in soft skills and professional technical security writing.Has a background in developing and auditing packet processing software written in native andhigh-level languages (C/C++, Rust, Golang, Python), and his research areas span a wide range ofplatforms and technologies.