+Supervise and coordinate offensive security activities, leading a team of 7+ penetration testers.
+Manage client relations and communication across offensive security engagements.
+Review reporting and present findings to stakeholders.
+Conduct Adversary Simulation engagements.
Jun 2024 — Jun 2026 · FD 3.5"
Security Specialist — Detect & Respond
Deloitte
+Adversary Simulation: red team engagements simulating ransomware attacks and service disruption, following MITRE ATT&CK TTPs, with detection evasion, custom shell implementations and C2 architectures.
+Web Application PT with Burp Suite Professional following OWASP WSTG.
+Infrastructure PT with Nmap, Nessus Professional, BloodHound and manual testing.
+IoT PT with Wireshark, Nmap and specialized tooling.
+DAST with Burp Suite Enterprise and Vulnerability Assessments with Nessus Professional, including detailed remediation reports.
+Attack Surface Analysis through OSINT and public data breach research.
+Phishing campaigns with targeted templates, specialized tooling and campaign statistics.
Dec 2022 — Jun 2024 · FD 3.5"
Security Consultant — Application Security
Deloitte
+DevSecOps assessments based on OWASP DSOMM and definition of improvement roadmaps.
+Cyber security risk assessments in ICT and corporate environments.
+Security baselines and roadmaps based on OWASP DSOMM, ISO 27001 and NIST SP 800-53.
Jul 2021 — Dec 2022 · FD 3.5"
Security Analyst — Application Security
Deloitte
+Supported the cyber security due diligence of a software house.
+Data flow security and compliance analysis on SAP SuccessFactors.
+PMO support on cybersecurity topics.
Jun 2016 — Sep 2016 · TAPE
Software Developer — Internship
Startit s.r.l.
+Developed Android applications in Java for highway traffic management and a CAF service portal.
Governance
DevSecOps & Risk Assessment
Level 4/5
Linked traces
Governance
Security Governance
Level 4/5
Linked traces
Penetration Testing
Infrastructure & AD Pentest
Level 5/5
Linked traces
Penetration Testing
Web App Pentest
Level 5/5
Linked traces
Penetration Testing
DAST & Vulnerability Assessment
Level 4/5
Linked traces
Penetration Testing
IoT Pentest
Level 3/5
Linked traces
Recon
OSINT & Attack Surface
Level 4/5
Linked traces
Recon
Phishing Campaigns
Level 4/5
Linked traces
Red Team
Adversary Simulation
Level 5/5
Linked traces
Red Team
C2 & Custom Implants
Level 4/5
Linked traces
Red Team
Detection Evasion
Level 4/5
Linked traces
Research
Malware Dev & ML Detection
Level 3/5
Linked traces
Certification · Aug 2025
eCPPT
INE Security
Certification · Dec 2023
CASE
EC-Council
Education
1st Level Master in Cyber Security
University of Pisa (UniPi) · Pisa
Feb 2025 — Apr 2026
Thesis: Training a Convolutional Neural Network for malware detection through automated static analysis of opcodes.
Specialized Course in Cyber Security
Cefriel — Politecnico di Milano · Milan
Sep 2021 — Jul 2022
Bachelor's Degree in Computer Science
University of Florence (UniFi) · Florence
Sep 2017 — Apr 2021
Thesis: A template-based approach to Stochastic Activity Networks to evaluate the reliability and fault tolerance of complex systems.