Luca Carettoni
Co-Founder at Doyensec
San Marino
Summary
🤩
Rockstar🎓
Top SchoolLuca Carettoni is a security-focused software engineer and entrepreneur with over 15 years of experience in application security, vulnerability research, and offensive engineering. As co-founder of Doyensec and former senior security leader at LinkedIn and Addepar, he blends hands-on penetration testing with building security-first products and programs for startups and enterprises. Luca has discovered numerous high-impact vulnerabilities across major vendors and presented research at top conferences like Black Hat and OWASP, including influential work on HTTP Parameter Pollution. He contributes to open-source tooling such as enhancements to the Burp Suite REST API (optimizing performance and expanding scanning capabilities), reflecting a practical focus on tooling that scales real-world security work. Based in San Marino with a Master’s in Computer Engineering from Politecnico di Milano, he pairs a “think outside the box” mindset with a track record of turning deep technical insight into commercial outcomes. Unusually, he still enjoys breaking things to learn how they work and often turns those lessons into fixes and product features.
12 years of coding experience
11 years of employment as a software developer
Master Degree, Computer Engineering, Master Degree, Computer Engineering at Politecnico di MilanoHigh-School, Electronic & Telecommunication, High-School, Electronic & Telecommunication at Istituto Tecnico Industriale di Sesto C.
English, Italian, Polish
Github Skills (16)
javas10
api-rest10
web-security10
rest-api10
api10
burp10
apidoc10
api-design10
restful-api10
java10
spring-boot10
security9
jtest9
junit9
jetty8
Programming languages (12)
Github contributions (5)
vmware/burp-rest-api
Feb 2018 - Nov 2022
REST/JSON API to the Burp Suite security tool.
Role in this project:
Backend Developer & Security Engineer
Backend Developer & Security EngineerContributions:4 releases, 4 reviews, 57 commits in 4 years 10 months
Contributions summary:Luca primarily focused on enhancing the Burp Suite REST/JSON API, as indicated by the repository description. Their contributions included removing deprecated APIs, fixing test errors, and optimizing the memory footprint by switching from Tomcat to Jetty. The user also implemented support for passive scanning and experimental spider status, indicating a focus on expanding the API's functionality and improving its overall performance, and addressing several bug fixes.
apisecurity-toolssecurityjson-restjson-rest-api
doyensec/awesome-electronjs-hacking
Jun 2020 - Nov 2022
A curated list of awesome resources about Electron.js (in)security
Contributions:33 commits, 8 PRs, 30 pushes in 2 years 5 months
securityelectron-jselectron
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.