[+972 54 4200052](tel:+972 54 4200052)
linkedin.com/in/liorshalev
About me
Software engineer with 20+ years building systems: endpoint security, secure browsers, counter-drone defense, and real-time computer vision. Effective from the kernel up, from Linux drivers and embedded Linux to Chromium internals and applied cryptography, with shipped products across Windows, macOS, Linux, iOS, and Android. I write the code and can own the architecture. I am looking for a senior individual-contributor or hands-on technical-lead role.
Skills
- Security: Endpoint security, Chromium internals, DLP, RF and Wi-Fi cyber systems, applied cryptography.
- Systems & low-level: Linux kernel and BSP work, Xilinx and FPGA platforms, embedded Linux, performance-critical systems.
- Computer vision: OpenCV, OpenGL, TensorFlow, ARKit, WebRTC, real-time video pipelines.
- Platforms: Windows, macOS, Linux, browsers, iOS, Android.
- Languages: C++20, Rust, Go, Python, TypeScript.
Experience
Jan 2026 – Present: Freelance Software Engineer
Production reliability, low-level systems, and cross-platform performance.
- Refactored Windows and macOS EDR integrations for performance and stability, resulting in a near-zero rate of production failures.
- Developed kernel DMA drivers for FPGA-to-user-space data paths on Xilinx SoC platforms.
Jan 2025 – Dec 2025: Stealth startup (founding team)
Founding Software Developer. Conceived and led a hardware-enforced endpoint security system from concept to working prototype. The architecture isolates display and input in dedicated trusted hardware, so a compromised host or browser can relay only opaque ciphertext and never access plaintext or keys, defeating keylogging, screen scraping, and man-in-the-browser attacks by design rather than by policy.
- Implemented the trusted display node prototype that captures an untrusted host's HDMI output, decrypts locally, and composites the plaintext as a trusted overlay, so the host never holds the key or plaintext.
- Implemented the content encryption gateway.
- Authored a whitepaper on a three-party authenticated key-exchange protocol. The protocol enables physically isolated, unidirectional input and output devices to converge on a single session key, addressing the state-synchronization problem that arises when the two devices cannot communicate directly.
We decided to close the venture after concluding that the commercial opportunity was too narrow.