Josh Schiavone
Information Security Professional, Cloud Security Engineering
Old Toronto, Ontario, Canada
Summary
🤩
Rockstar🎓
Top SchoolJosh Schiavone is an information security professional with eight years of experience specializing in application and cloud security across financial institutions, consulting, and academia. Currently at Scotiabank, he focuses on application security and CNAPP operations—managing DAST, SAST, SCA, and MAST—to operationalize vulnerability and risk assessment at scale. Previously at the Bank of Canada he led threat modeling initiatives and safeguarded critical systems, and as a consultant he performed hands-on penetration tests and vulnerability assessments for a range of clients. He pairs a solid computer science foundation from Carleton University with practical tool experience (Burp Suite, Nmap, Python, C++) and a knack for translating security strategy into engineering practices. Beyond professional roles, he’s contributed open-source tooling for deep-web intelligence (darkdump) and has supported over 150 students as a teaching assistant, highlighting both technical depth and a commitment to mentorship. He thrives at the intersection of technology, strategy, and measurable risk reduction.
8 years of coding experience
1 year of employment as a software developer
Bachelor of Science - BSc, Computer Science, Bachelor of Science - BSc, Computer Science at Carleton University
Spanish, English
Github Skills (7)
apim10
api10
beautifulsoup10
python10
webscraping10
http-request10
argparse9
Programming languages (4)
Github contributions (5)
josh0xA/darkdump
Feb 2021 - Jan 2023
Open Source Intelligence Interface for Deep Web Scraping
Role in this project:
Back-end Developer
Back-end DeveloperContributions:2 releases, 43 commits, 1 PR in 1 year 11 months
Contributions summary:Josh primarily contributed to the development of the Darkdump tool, focusing on core functionality and features. Their work includes adding user agent headers, a response length handler, and proxy support to enhance the tool's capabilities. They also made crucial changes by fixing copyright information and renaming the core file. Furthermore, the user refactored the code to remove whitespace.
golangpythonterminaldeep-websearch
josh0xA/K55
Jan 2021 - Mar 2021
Linux x86_64 Process Injection Utility | Manipulate Processes With Customized Payloads (beta)
Contributions:1 release, 1 review, 80 commits in 2 months
customizedinjectionlinuxmethodologyx86
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.