Monopoli, Apulia, Italy
Experienced Application Security Engineer specializing in web application security. Certified in OSWE, BurpSuite, OSCP, CEH. Extensive experience in penetration testing. Skilled in identifying vulnerabilities and implementing robust security measures. Strong collaboration and communication abilities.
Bot detection adversarial research
- Penetration testing against networks and web applications - 20+ accepted high-impact vulnerabilities
- Consulting software development teams in the security area - BugBounty program management - Security review (design, code) within SSDLC - Manual and automated code review (millions lines of code - mostly Python, Go, Java) - White-box pentesting - Awareness and training for developers, internal CTF organization for development teams - Cloud WAF and AntiBot rules management (Imperva, Cloudflare) - ASPM tools development
- 30+ Penetration Testing projects - Mostly Web Application pentesting but also Mobile, Desktop apps, Infrastructure (Network, Hosts) - Code reviews (Java, C#) - A long SDLC project - Web/IOS/Android/Desktop apps, Network/Hosts Pen Testing - Development of penetration tester tools and scripts
- SIEM, IPS/IDS, Firewalls implementation, configuration and administration - Integration network equipment and servers with SIEM - Advising subordinate units on incidents and incident prevention, recommendations development for closing vulnerabilities - Participation in information security tools selection, requirements assessment, testing and implementation - Performing security incident investigations - Documentation and conforming to processes related to security monitoring - Security monitoring
- Security monitoring with SIEM, IPS/IDS, DLP, Firewalls, Vulnerability scanners, Network assets scanners, Corporate Antivirus - Monitoring the information flow transmitted through various channels (HTTP / HTTPS, removable storage media, e-mail, printing documents, etc.) - Information security incident response, event logs analysis, violations processing - Participation in security incident investigations