Xin Hu

About Xin Hu

Homepage: https://sites.google.com/site/xincybersec/ I am currently a Member of Technical Staff at OpenAI. Prior to that, I was a Sr. Staff Security Engineer at Robinhood and the engineering manager of infrastructure security team at Pinterest. I was responsible for developing strategies and driving technical solutions to protect the security and safety of systems, services and data. The team achieve their mission by providing security supports and developing security platforms to help engineers build safe and secure backend services that power infrastructure. Responsibilities include: Security architecture review, AWS permissions and policies, employee/machine authentication, access control, secure communication between services, privacy and confidentiality of data in transit and at rest, host and network monitoring and alerting, system hardening, patching and vulnerability management, and incident response. I also have extensive academic research background (35+ publications on top security conferences), including applying data mining and machine learning techniques on network traffic and malware data for predictive analytics, intrusion detection, anomalous pattern discovery and risk analysis. Specialties:* Infrastructure security: host level monitoring, auditing, Intrusion detection, system hardening, internal PKI, secure service communication* Cloud security, policy management, access control, user authentication, API monitoring, anomaly detection* Service authentication and authorization: securing microservices, visibility, policy enforcement, service identity and security* Incident response: vulnerability management, patch management, detection, mitigation and remediation* Container/Kubernetes security: inspection, key management, authentication* Large scale data analysis, data mining and machine learning* python, Go Language, Nodejs, IDA Pro* Security threat analysis (e.g, worms, spam, botnets)* Malware reverse engineering

Experience

1. Member of Technical Staff

   OpenAI

   Jun 2022 — Present

   Apply LLM on real-world security tasks and improve language models\' cybersecurity capabilities. LLM Agentic security. Develop security services and platforms for cloud security, k8s security, authentication/authorization, access control

Education

• Zhejiang University

  BE, Computer Science and Engineering

  2001 — 2005

• University of Michigan

  PhD, Computer Science

  2005 — 2011

Skills

• C++
• Scalability
• Big Data
• Malware Analysis
• Go Language
• Security
• Algorithms
• Perl
• Computer Security
• Large-Scale Data Analysis
• Python
• Network Security
• Machine Learning
• Java
• Analytics
• Big Data Analytics
• Data Analysis
• C
• Data Mining
• Distributed Systems