Lukas Javorsky

I'm a Senior Product Security Engineer at Red Hat, working as an Incident Commander with a focus on the EU Cyber Resilience Act and the security of open-source products.

My perspective on product security comes from having worked in engineering teams before moving into Product Security. Earlier in my Red Hat career, I worked on MariaDB, MySQL, and archive components such as tar, zlib, and libarchive, as well as container images through SCLOrg across Fedora, RHEL, and CentOS. That hands-on background helps me understand the practical challenges development teams face when security requirements, vulnerabilities, compliance, and product delivery meet.

Today I work on the other side of that equation: driving security response across products, coordinating incident response, and translating cybersecurity regulation into engineering practice. I'm also a Red Hat delegate to ETSI, working on EU CRA vertical standards for operating systems.

A major part of my work is bridging the gap between security and engineering. Having been part of engineering teams myself, I care about making security processes practical and useful — not treating security as something separate from how products are actually built and maintained.

I'm also deeply involved in the Fedora Project, where I progressed from Packager to Proven Packager and Packager Sponsor, and I'm a member of the Fedora Security SIG. This keeps me connected to the communities and engineering workflows behind many of the technologies I now help secure.