Max Bruce, Software Developer in San Francisco, United States
Max Bruce

Software Developer in San Francisco, United States

Member since September 9, 2019
Max is a self-taught engineer with over 10 years of experience on a variety of platforms. Max has worked within large teams and led small teams to develop products from the ground up, and maintained, improved, and iterated upon existing products both user-facing and infrastructure. He comes from a self-taught background with some formal education, along with a ton of open source work and contributions.
Max is now available for hire


  • ByteDance
    JavaScript, Go, Rust
  • VoiceOps
    Amazon Web Services (AWS), Google Cloud Platform (GCP), AWS, JavaScript, Rust...
  • Shape Security
    Amazon Web Services (AWS), Google Cloud Platform (GCP), AWS, JavaScript, Java



San Francisco, United States



Preferred Environment

Redis, PostgreSQL, JavaScript, Rust, C

The most amazing...

...thing I've ever done is reverse engineer a security product in high school, got hired as an intern, and then hired full time by my first year of college.


  • Security Software Engineer

    2020 - PRESENT
    • Hit the ground running refactoring key internal security infrastructure to solve scaling issues while improving the security model.
    • Navigated complex and undocumented codebases in order to integrate, improve, and of course, document.
    • Worked closely with other teams in order to deliver the best product for every stakeholder while still maintaining key goals.
    Technologies: JavaScript, Go, Rust
  • Software Engineer

    2019 - 2020
    • Improved back-end and front-end site performance by over 300%.
    • Led a project to rewrite the critical user-facing website, improving margins by 13%.
    • Refactored internal pipelines for robustness/error correction in event of partial failure.
    • Discovered and resolved several critical security vulnerabilities including SQL injection, authentication bypass, etc.
    • Created a comprehensive testing framework for a large project with no existing tests.
    • Resolved countless PostgreSQL scaling problems, including missed indices, extraneous indices, schema modifications, sharding, partitioning, hardware tuning, and more.
    Technologies: Amazon Web Services (AWS), Google Cloud Platform (GCP), AWS, JavaScript, Rust, Go, PostgreSQL, React, Ruby on Rails (RoR)
  • Software Engineer

    2017 - 2019
    Shape Security
    • Optimized an in-house JavaScript virtual machine.
    • Led a project to rewrite a domain-specific language engine, optimizing for business needs.
    • Created a regular expression parser/acceptor for ES2016-ES2018.
    • Improved internal JavaScript parsers and compiler to support ES2017 standard.
    Technologies: Amazon Web Services (AWS), Google Cloud Platform (GCP), AWS, JavaScript, Java


  • Avuna HTTPD

    Avuna HTTPD is a fully functional web server implementation in C that supports HTTPS, virtual hosts (with SNI), FCGI, and more. This was a personal project designed to maximize the request throughput.

  • Avuna DNSD

    A fully functional DNS nameserver written in C. This project is used for running a public DNS nameserver that I administer and a few people use. It is capable of loading zones from MySQL (for a web UI to interact with) or configuration files.

  • Basin

    Basin is a Minecraft server rewrite in C, designed for high-performance execution under extremely constrained resources. The original goal was to provide a way to play the game, Minecraft, from hacked embedded devices, such as routers, modems, or IoT devices. The project is ongoing and has a small community of followers.

  • JASM: JVM Disassembler and Java Decompiler

    JASM is a JVM disassembler and Java decompiler. The project was originally conceived as a JVM bytecode editor but has since pivoted into a full decompiler in order to aid in the rapid development of my Basin project.

  • Shift Regexp Acceptor

    This is an open-source project I was the lead developer on for Shape Security. Shift Regexp Acceptor determines the validity of ES2016, ES2017, and ES2018 regular expressions in JavaScript code, part of the large Shift JavaScript parser ecosystem.

  • Bandolier

    Bandolier is an open-source project that I made large contributions to, owned by Shape Security. I was in charge of a large rewrite of much of the core logic of Bandolier, including specifying a generalized approach to JavaScript module bundling that would be guaranteed to work in all possible situations.


  • Languages

    C, Java, Kotlin, Rust, JavaScript, Ruby, CSS, C++, Go, PHP, Python
  • Frameworks

    Ruby on Rails (RoR), OpenCL, Express.js
  • Libraries/APIs

    Node.js, React, OpenGL, OpenSSL
  • Tools

    Git, V8
  • Paradigms

    Functional Programming, Procedural Programming, Object-oriented Programming (OOP), Agile
  • Platforms

    Linux, JVM, Android, Docker, Google Cloud Platform (GCP), Amazon Web Services (AWS), Kubernetes
  • Storage

    PostgreSQL, Redis, MySQL, NoSQL
  • Other

    LLVM, Linux Kernel Drivers, AWS


  • Bachelor of Science degree in Computer Science
    2017 - 2019
    University of California, Santa Cruz - Santa Cruz, California

To view more profiles

Join Toptal
Share it with others