About Sumihara 事業概要
One person.
Direct responsibility.
I'm Matthew Toro. I run Sumihara Productions, a software and security practice built around direct work with the person who hires me.
Business profile
- Business name 屋号
- Sumihara Productions
- Owner 代表
- Matthew Toro
- Business type 事業形態
- Sole proprietorship
- Team 体制
- No staff. You work directly with me.
Working together
A direct line to
the work.
I handle the technical work and the conversation about it. When you explain a problem, you are talking to the person who will investigate it and make the changes.
My background combines application development with the infrastructure and security work around it. I can build a feature, trace a broken integration, or review how an application handles access.
We agree on the scope before work starts. Dynamic penetration testing requires written authorization and a defined testing boundary.
Read the testing requirementsI work in English and Spanish.
Experience
Background
My contract employment is separate from Sumihara's customer engagements.
View the portfolio2026–present
Cossette Productions LLC
Full Stack Engineering / E-Commerce App Developer · Contract
Built a custom e-commerce storefront and backend, with CMS and API integrations for purchasing and order management.
April–July 2026
DeltaClaims.AI
DevSecOps Engineer I · Contract
Worked on cloud security and SOC 2 readiness, led penetration testing, and built an internal operations portal. Promoted to DevSecOps Engineer I after two months.
2023–2025
Freelance technical consulting
IT support and system administration across Windows, Linux and macOS. Built and managed virtualized servers supporting communities of 24 to 60 users, with scripting and network hardening.
Study & qualifications
Education and
credentials
Broward College
Bachelor of Applied Science in Information Technology, Cybersecurity & Ethical Hacking. Associate of Arts and Associate of Science in Networking Systems Technology and Cybersecurity.
Certifications
- CISSP · (ISC)²
- Certified Ethical Hacker (CEH) · EC-Council
- CCNA · Cisco
- Cloud Practitioner · AWS
- A+, Network+, Security+, Linux+, Cloud+, CySA+ and Secure Infrastructure & IT Operations Specialist (CSIS) · CompTIA
Technical practice
Tools I work with
- Applications
- TypeScript, JavaScript, Python, React, Next.js, Node.js, SQL and MongoDB.
- Security
- Burp Suite, Nmap, Nessus, OpenVAS and Kali Linux. Vulnerability management, access controls and system hardening.
- Cloud & endpoints
- Azure, AWS, Entra ID, Intune, Windows Autopilot and Microsoft Defender.
- Infrastructure
- Linux, Windows Server, Cisco networking, VMware, Proxmox, Hyper-V and KVM.
Start with a conversation.
Custom projects, full-time roles and longer-term contracts are welcome.