Enrico Dolce
Senior Security Specialist · Red Team Operator · Penetration Tester
Milan, Italy · github.com/ed0x00 · linkedin.com/in/enrico-dolce
Cybersecurity professional with 5 years of experience, currently a member of an offensive security team. I specialize in red teaming and advanced attack simulations to strengthen enterprise resilience, with a solid background in cybersecurity governance: security and maturity assessments based on the main frameworks, and strategic guidance to define and implement remediation plans.
Experience
Senior Security Specialist — Detect & Respond — DeloitteJun 2026 — Present
- Supervise and coordinate offensive security activities, leading a team of 7+ penetration testers.
- Manage client relations and communication across offensive security engagements.
- Review reporting and present findings to stakeholders.
- Conduct Adversary Simulation engagements.
Security Specialist — Detect & Respond — DeloitteJun 2024 — Jun 2026
- Adversary Simulation: red team engagements simulating ransomware attacks and service disruption, following MITRE ATT&CK TTPs, with detection evasion, custom shell implementations and C2 architectures.
- Web Application PT with Burp Suite Professional following OWASP WSTG.
- Infrastructure PT with Nmap, Nessus Professional, BloodHound and manual testing.
- IoT PT with Wireshark, Nmap and specialized tooling.
- DAST with Burp Suite Enterprise and Vulnerability Assessments with Nessus Professional, including detailed remediation reports.
- Attack Surface Analysis through OSINT and public data breach research.
- Phishing campaigns with targeted templates, specialized tooling and campaign statistics.
Security Consultant — Application Security — DeloitteDec 2022 — Jun 2024
- DevSecOps assessments based on OWASP DSOMM and definition of improvement roadmaps.
- Cyber security risk assessments in ICT and corporate environments.
- Security baselines and roadmaps based on OWASP DSOMM, ISO 27001 and NIST SP 800-53.
Security Analyst — Application Security — DeloitteJul 2021 — Dec 2022
- Supported the cyber security due diligence of a software house.
- Data flow security and compliance analysis on SAP SuccessFactors.
- PMO support on cybersecurity topics.
Software Developer — Internship — Startit s.r.l.Jun 2016 — Sep 2016
- Developed Android applications in Java for highway traffic management and a CAF service portal.
Skills
- Governance
- DevSecOps & Risk Assessment, Security Governance
- Penetration Testing
- Infrastructure & AD Pentest, Web App Pentest, DAST & Vulnerability Assessment, IoT Pentest
- Recon
- OSINT & Attack Surface, Phishing Campaigns
- Red Team
- Adversary Simulation, C2 & Custom Implants, Detection Evasion
- Research
- Malware Dev & ML Detection
Certifications
- eCPPT — INE Security, Aug 2025
- CASE — EC-Council, Dec 2023
Education
- 1st Level Master in Cyber Security — University of Pisa (UniPi) (Feb 2025 — Apr 2026)
Thesis: Training a Convolutional Neural Network for malware detection through automated static analysis of opcodes.
- Specialized Course in Cyber Security — Cefriel — Politecnico di Milano (Sep 2021 — Jul 2022)
- Bachelor's Degree in Computer Science — University of Florence (UniFi) (Sep 2017 — Apr 2021)
Thesis: A template-based approach to Stochastic Activity Networks to evaluate the reliability and fault tolerance of complex systems.
Languages
Italian (native) · English (proficient, spoken and written)