Josh Tomkiel

Josh Tomkiel is a Director and Penetration Tester with Schellman based in Philadelphia, PA. Prior to joining Schellman in 2015, he worked as an Application Security Analyst at Barclaycard US, performing web/mobile application security assessments and penetration testing on key IT systems. He produced detailed risk reports that identified vulnerabilities and provided recommendations on how to remediate findings. In addition, he conducted static and dynamic code analysis on internally developed applications. Josh has over 12 years of experience in the Information Technology field.

Josh has a deep background in application penetration testing, although he is also very knowledgeable in network penetration testing, particularly in macOS heavy environments. Josh leads Schellman’s mobile penetration testing activities and phishing program.