Dominic Spinosa
Detection Engineer at Meta
New York City Metropolitan Area United States
Summary
👤
Senior🎓
Top SchoolDominic Spinosa is a detection engineer with 11 years of offensive and defensive security experience, currently at Meta after earlier roles leading offensive security at Lacework. He blends deep red-team expertise with cloud-focused threat detection, drawing on an MS in Cybersecurity and a background in incident-focused consulting and security engineering. Dominic contributes practical tooling to the community—his GitHub includes a DDE/Office payloads project that demonstrates hands-on exploit development and payload obfuscation. Comfortable in both purple-team and cloud-native contexts, he pairs attacker mindset with engineering rigor to build detections that scale. Based in the New York City area, he brings a track record of translating complex adversary techniques into actionable controls and detections.
11 years of coding experience
13 years of employment as a software developer
Master of Science (M.S.) Cybersecurity, Master of Science (M.S.) Cybersecurity at NYU Polytechnic School of EngineeringBS Computer Engineering, BS Computer Engineering at Villanova University
Github Skills (10)
it-security10
obfuscation10
develop10
malware10
python10
command-execution10
anti-malware10
security10
excel9
vba8
Programming languages (11)
Github contributions (5)
0xdeadbeefJERKY/Office-DDE-Payloads
Oct 2017 - Mar 2021
Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
Role in this project:
Security Engineer
Security EngineerContributions:33 commits, 2 PRs, 30 pushes in 3 years 5 months
Contributions summary:Dominic primarily contributed to a project focused on generating malicious Office documents for DDE-based command execution. Their work involved developing a Python script to create Word documents that leverage the DDE feature to execute commands. The user implemented options for obfuscating the DDE payload. Furthermore, they addressed various issues and made improvements, including fixing backslash escapes and adding support for Excel payloads.
ddemacroembeddedcommand-executionexecution
0xdeadbeefJERKY/mythic-deploy
Nov 2020 - Oct 2022
Automated deployment and configuration of a Mythic server using Terraform and Ansible
Contributions:12 commits, 1 PR, 1 push in 1 year 10 months
devopsdeploymentansibleautomated-deploymentdocker
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.