Matt Tesauro
Chief Technology Officer at University of Texas, Department of Computer Science
Austin, Texas, United States
Summary
🤩
Rockstar🎓
Top SchoolMatt Tesauro is a Chief Technology Officer and information security leader with 13+ years of hands-on experience specializing in web application security, secure SDLC, and automation. He blends pen-testing, dynamic/manual/static analysis, and DevSecOps practices to scale AppSec programs—having designed pipelines that increased test coverage nearly tenfold in real-world deployments. A long-time OWASP contributor and current board member, he leads the AppSec Pipeline project and has driven automation and governance across a global nonprofit and enterprise teams. At DefectDojo he improved deployment and production tooling for a widely used open-source vulnerability management platform, reflecting a strong infrastructure-to-backend focus. He also teaches university-level computer security, pairing practical industry expertise with pedagogy. CISSP-, CEH-, RHCE- and Linux+-certified, he combines deep technical craft with program leadership to operationalize security across development lifecycles.
13 years of coding experience
13 years of employment as a software developer
M.S. Management Information Systems, M.S. Management Information Systems at Texas A&M University
Github Skills (14)
automation10
bash10
automations10
devops10
python10
django10
ansible9
vulnerability-management9
ansible-galaxy9
docker8
security8
dockers8
security-automation8
mysql7
Programming languages (11)
Github contributions (5)
DefectDojo/django-DefectDojo
Dec 2016 - Jan 2023
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
Role in this project:
DevOps Engineer & Backend Developer
DevOps Engineer & Backend DeveloperContributions:3968 reviews, 75 commits, 2036 PRs in 6 years 2 months
Contributions summary:Matt primarily focused on improving the setup and deployment processes for the DefectDojo application. Their contributions include modifying the `setup.bash` script to allow for non-interactive builds, updating the Ansible configuration for local and development installations, and adding systemd service files for production deployments. They also made several changes to the settings and configuration files, demonstrating a focus on infrastructure and backend configuration. Furthermore, they updated UI element selection and adjusted the UI product name max chars to align with the model and API.
devsecopsvulnerability-managementpythonvulnerability-databasesdjango
appsecpipeline/gasp
Mar 2018 - Sep 2019
Contributions:9 commits, 7 pushes, 1 branch in 1 year 6 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.