Matthew Strasiotto
Software Developer
About
Full-stack engineer with security depth who ships customer-facing outcomes end-to-end; Polyglot, poly-stack, poly-role.
Work Experience
-
Full-stack engineer delivering customer-facing APIs and docs (TypeScript/React, Apollo GraphQL, OpenAPI, Cube.js).
React/Typescript/NoSQL microservice based stack
Shipped self‑serve data/API: OpenAPI spec, secure endpoints, embedded API docs.
Implemented CI doc‑gen for Cube.js data models; docs‑as‑code keeps docs aligned with code.
Built React + Apollo GraphQL features; strengthened typed UI→Graph contracts.
Closed the loop with customers to prioritise onboarding and activation improvements.
Developed and deployed kubernetes IaC stack to variety of environments including AWS + bare-metal
- AWS
- Apollo GraphQL
- CI/CD
- Cube.js
- Docs‑as‑code
- OpenAPI
- SAST
- graphql
- kubernetes
- nosql
- react
- typescript
-
— 3 years
Static analysis rule delivery and developer enablement across multiple languages and frameworks.
Owned and shipped language delivery MVPs for Groovy, Rust, Objective‑C, and Dart.
Contributed across broader ecosystems: Java, Go, Python, Swift, C++ (rules, tests, triage).
Built internal framework‑coverage reporting used by Eng leadership for roadmap clarity.
Authored embedded customer-facing rule docs explaining ‘why this triggers’ and safe patterns to reduce CX loops.
Improved taint/data‑flow models and triage conventions to raise signal‑to‑noise.
Handled customer tickets (including renewal-sensitive issues) and owned outcomes end-to-end with CX/Support.
- AppSec
- Application Security
- Dart
- Developer education
- Go
- Groovy
- Java
- Objective‑C
- Python
- Rust
- SAST
- Security
- Static analysis
- Swift
- Taint analysis
-
— 3 years
Eora/Sydney, NSW
Translating high-volume, routinely collected electronic medical records into high-value research data to improve patient outcomes
Built highly scalable data pipeline + contributed to FOSS pipelining software for documenting & monitoring pipeline
Designed + Built web-app for rapid labeling of datasets. Focus on UX, ergonomics, discoverability & rapid keyboard navigation.
- R
- pipelining
- reproducibility
- tidy
- reproducibility
- HPC
-
— 3 years
Eora/Sydney, NSW
COMP2017: Systems Programming, in C within *NIX, concurrency, data structures, memory safety.
COMP2123: Data Structure + Algos.
INFO1110: Intro to programming, OOP, specification breakdown, testcase design
ELEC3607: Embedded Systems in C++ - Registry manipulation of ARM Cortex M3, ASM, debugging embedded
Projects
-
Selected product-engineering results that improved activation, API adoption, and developer docs across modern web stacks.
Shipped self‑serve APIs with OpenAPI + embedded docs; reduced support load and accelerated customer activation.
Introduced coverage/visibility tooling that informed roadmap prioritisation and improved stakeholder confidence.
Operationalised docs‑as‑code with CI publishing to keep customer docs in lock‑step with code.
- Product impact
- Activation
- Docs‑as‑code
- Coverage reporting
-
Rpackage that connectscode</>docs todatadocs 📈 demoExtends standard docstring tools to accomodate structured documentation of fields of input & output data
Structured data doc can be serialized, & used in enriching directional acyclic graphs (DAGs) of pipeline
Information about a given target (eg, command used to generate, links to functions used, documentation on target properties) in a pipeline can be discovered by clicking on that target in the network graph.
- R
- js
- reproducibility
- UX
- makefile
- pipelining
- disocverability
- infrastructure
-
Significant contributions to open source web-app for scheduling reddit posts (Now closed source)
Implement views for grouping posts according to content, as well as rapid templating workflows
Work across full Symfony + Redbeans (ORM) + SQL stack to enrich UX
- html
- js
- ORM
- Model View Controller
- Model View Template
- frontend
- responsive design
-
Misc contributions to various open source projects
C# / Dotnet: rawaccel - kernel mode mouse accel, Helios Display Management, maintainership of videoduplicatefinder
, jellyfin-plugin-sso - OAuth for jellyfin media server,
R Packages: rmarkdown, htmltools, pkgdown, downlit, xaringan - Rmarkdown presentation tool, clustermq - HPC Array Scheduler, renv - project env management, drake - pipelining toolkit, rvisidata
js / frontend: yotamberk/timeline-plus, vis-timeline
Super random: vim-tmux-navigator - tmux plugin that integrates vim pane-switching, SpaceVim - Community Vim Distribution, myhr_helper - UX userscript for USYD timesheet submission
- go
- rust
- dotnet
- html
- R
- js
- html
Awards
-
'Outstanding performance in your studies' - Achieved highest aggregate grade of first year engineering cohort.
Education
-
GPA: HD for CompSci units— 4 years
Eora/Sydney, NSW
-
GPA: 7.0 / 7.0 (HD)— 8 months
Jagera/Turrbal/Brisbane, QLD
Skills
-
#
Webdev
- HTML
- CSS
- javascript
- TypeScript
- React
- Vue.js
- GraphQL
- Apollo GraphQL
- OpenAPI
- Cube.js
- Docs‑as‑code
- webpack
- bootstrap
- PHP/Symfony
- ORM
-
#
Backend / Native
- .NET
- C#
- C
- C++
- Qt
- python
- R
- java
- Go
- Rust
- Swift
- Objective‑C
- Dart
- Groovy
- Node.js
- GraphQL APIs
- NoSQL
-
#
Tooling
- git
- *nix environments
- ssh/Remote Only
- HPC
- Shell Scripting
- AWS
- AWS SES
- Docker
- Kubernetes
- Infrastructure as Code
- CI/CD
- OpenAPI
- Docs‑as‑code
- Cube.js
- VS Code extension development
- vagrant
- Building/Debugging in Constrained Envs
-
#
Application Security (AppSec)
- Application security
- Secure SDLC
- Threat modeling
- Secure code review
- Static analysis
- Taint analysis
- Developer education
- Vulnerability triage
- Remediation guidance
- CI/CD security gates
- Dependency & secrets scanning
- Groovy (target)
- Rust (target)
- Objective‑C (target)
- Dart (target)
- Java (target)
- Go (target)
- Python (target)
- Swift (target)
- C++ (target)