About

Max Moroz is a seasoned hacker, leader, and investor with over 14 years of relevant experience in the tech industry. He is currently the Engineering Manager at ByteDance, where he is responsible for building and leading offensive and defensive security teams in AMER and EMEA. Max's scope of work includes design review and engineering guidance, penetration testing and security assessment, vulnerability research and exploit development, red team and offensive security, and cross-functional support for Marketing, Legal, Comms, BD, TnS, and other departments. Before joining ByteDance, Max worked at Google as an Information Security Engineer and Team Lead. He was part of the Chrome Security team and contributed to the team's roadmap and long-term strategy. Max was also the team lead for OSS-Fuzz, where he made sure that critical open-source software was well-fuzzed. He was responsible for improving the tools and infrastructure for fuzzing at scale, educating developers to write fuzzers, and driving adoption of fuzzing as a best practice. Max also conducted security reviews to prevent shipping vulnerabilities to users, reduce attack surface, and educate developers towards safer design decisions and using mitigations in place. He contributed to Chromium, LLVM, ClusterFuzz, and OSS-Fuzz. Max also worked as a Security Researcher at Synack Red Team, where he conducted vulnerability research and participated in invite-only Bug Bounty programs. Max has a Master's degree in Computer and Information Systems Security/Information Assurance from the National Research Nuclear University MEPhI in Moscow and completed Executive Education at Stanford University Graduate School of Business. Max's tech stack includes Senior Software Engineer, Research Scientist, test, and infra. He is passionate about driving product security and engineering excellence and is always looking for new challenges to solve.