Profile / プロフィール

Work Experience

GMO Flatt Security Inc.

Chief Technology Officer (CTO / Co-CTO)

June, 2021 - PRESENT

Security Engineer

May, 2019 - May, 2021
  • Currently Executive Vice President and Co-CTO. I joined Flatt Security in May 2019, became CTO in June 2021, and joined the board in June 2022. The company joined GMO Internet Group in February 2024 and changed its name to GMO Flatt Security in January 2025.
  • Developing Takumi byGMO to address vulnerabilities and malicious code in modern software. I lead research and development of a security platform that helps engineering teams tackle both unintended security flaws and deliberately malicious software. Alongside AI-powered vulnerability assessment and remediation, Takumi includes Guard to block malicious packages and Runner to protect CI/CD environments.
  • Led development of Shisho Cloud. My responsibilities spanned product management, business development, and product engineering, including customer interviews, product strategy, and building the engineering team. The product evolved from Policy as Code and cloud security management toward automated security assessment.
  • Led development of KENRO byGMO, a secure coding training platform. I designed and developed much of the initial codebase, including the sandbox and automated evaluation of learners' code fixes, and supervised training content. The evaluation system is covered by Japanese Patent No. 7463021. I also worked on business development and sales during the launch phase.

Lecturer at Web System Design Program (WEBSYS)

November, 2018 - March, 2024

Student Researcher at IBM Research - Tokyo

March, 2018 - February, 2019
  • Worked on DNS security and co-invented a method for detecting homograph attacks.

Part-Time Security Engineer at IERAE Security Inc.

September, 2017 - April, 2019
  • Did vulnerability testing of Web applications.

Education & Certifications

Faculty of Science, the University of Tokyo

April, 2017 - March, 2021
  • Received B.Sc. in Information Science, as a student of Hagiya Laboratory.
  • The reference GPA is about 3.82/4.0; the value is based on Japan-U.S. Educational Commission since the University of Tokyo does not provide the official GPA.
  • 93 credits in Senior Division (Department of Information Science): 42 A+ (優上; 100-90), 30 A (優; 89-80), 7 B (良; 79-65), 8 C (可; 64-50), 6 Pass (for pass-or-fail basis credits)
  • 69 credits in Junior Division (College of Arts and Sciences): 37 A+ (優上; 100-90), 23 A (優; 89-80), 3 B (良; 79-65), 0 C (可; 64-50), 6 Pass (for pass-or-fail basis credits)

TOEFL iBT

February, 2021
  • Score: 91/120 (Reading: 27/30, Listening: 23/30, Speaking: 17/30, Writing: 24/30)
  • I've experienced 1-2 years of working with English-speaking colleagues after this test ― I believe my English skills have improved since then :-)

Publications

ハンズオンWebAssembly

2022, オライリージャパン
  • ISBN: 978-4-8144-0010-2
  • Author: Gerard Gallant
  • Translator: 北原 憲, 洲崎 俊, 西谷 完太, 磯野 亘平, 米内 貴志 (me)
  • See this page for further information of this book.

詳解セキュリティコンテスト

2021, 株式会社マイナビ出版
  • ISBN: 978-4-839973-49-0
  • Author: 梅内 翼, 清水 祐太郎, 藤原 裕大, 前田 優人, 米内 貴志 (me), 渡部 裕
  • See this page for further information of this book.

Webブラウザセキュリティ

2021, ラムダノート株式会社
  • ISBN: 978-4-908686-10-8
  • Author: 米内 貴志 (me)
  • See this page for further information of this book.

Verification of Microservices Using Sidecar Proxy and Distributed Traces

2021, Bachelor Thesis
  • Here is an abstract of the paper.
  • Please email me to get the full version.

特許第7463021号

Filed 2020; granted 2024, JP Patent
  • Inventor: Takashi Yoneuchi (me)
  • Patent ID: JP7463021B2
  • Invented with my colleagues at Flatt Security.

Comprehensive homographic string detection

2018, US Patent
  • Inventor: Takashi Yoneuchi (me), Yuji Watanabe, Fumiko Akiyama
  • Patent ID: US20200134102A1
  • Invented with my colleagues at IBM Research - Tokyo.

R&D Projects

Research and Development of Next-Gen Quantum-Classical Programming Language

June, 2021 - February, 2022
  • Developed Qitten, a next-gen quantum-classical programming language.
  • This project was supported by MITOU Target Program, a research grant for quantum projects.
  • Reference: a project summary page
  • Reference: slides

Development of a Tiny Web browser with V8 JS engine

May, 2021 - August, 2021
  • Developed puppy, a tiny Web browser written in Rust for educational purposes.
  • It's about 4k lines of code including tests.
  • it can parse HTML/CSS, render it in your terminal, and even execute JavaScript with the v8 engine!
  • Reference: the GitHub repository for this project.

Development of Linux-compatible RISC-V CPU on FPGA from scratch

December, 2019 - March, 2020

Research on Blind Regular Expression Attack

September, 2019 - February, 2020

Volunteer Experience

CODE BLUE Review Board

2024 - PRESENT
  • Review talk submissions for the international cybersecurity conference CODE BLUE.

Head Captain, Team Asia — International Cybersecurity Challenge 2023

2023
  • Led the Asian representative team at the International Cybersecurity Challenge 2023.

Security Camp Committee

全国大会専門コースプロデューサ

2022 - 2024

講師グループ

2019 - 2024

企画推進グループ

2018 - 2021
  • Provided some training courses on Web/product security.
  • Supported trainers technically and mentally.

SECCON Committee

Leader of CTF WG

April, 2021 - March, 2022

Leader/Staff of Beginners WG

April, 2017 - March, 2021
  • Organized CTFs and trainings for beginners.

Vulnerability Research on Popular Products

  • Finding vulnerabilities of widely-used applications to make the world more secure!
  • See this page to check a full list of CVEs.

Honors and Awards

3rd place as Head Captain of Team Asia, International Cybersecurity Challenge 2023 (ICC)

2023

Bachelor Degree Scholarship, 一般財団法人知可子育英支援財団

2017 - 2020

1st place as team dodododo, SECCON CTF 2019 Finals (Domestic)

2019

1st place as team dodododo, SECCON CTF 2018 Finals (Domestic)

2018

3rd place as team dodododo, SECCON CTF 2017 Finals (International)

2017

1st place as team dodododo, SECCON CTF 2013 Hokkaido

2013

Presentations

Selected talks are listed below. More slides are available on my Speaker Deck and GMO Flatt Security’s Speaker Deck. See also talks, media appearances and recordings.