I research, test, and build resilient digital systems.

Italy

Penetration testing across infrastructure, OT, and web and application environments, including code-level security assessments and realistic attack simulations.

• Identify logic flaws, insecure patterns, and vulnerabilities across complex attack surfaces.
• Build custom software and automation to extend penetration-testing capabilities.
• Contribute to initiatives within the Research & Development Team, IoT Lab, and Purple Team.

Ljubljana, Slovenia

Core member of the Italian-Slovenian Blue Team for Locked Shields, focused on critical web services connected to industrial control systems.

• Assess, safely exploit, and remediate high-impact vulnerabilities under active incident pressure.
• Develop defensive patches while protecting the integrity and availability of mission-critical services.

Bari, Italy

Lead web application security research, responsible disclosure and various CTF activity.

• Contributed to multiple published CVEs and verified findings affecting major platforms.
• Participate in national and international cybersecurity exercises and simulations.
• Won the Italian cybersecurity championship in 2026. See more ↗

Bari and Turin, Italy

Train and mentor participants in practical web application security through realistic offensive and defensive exercises.

• Guide the University of Bari team through hands-on attack and defense scenarios.
• Combine security theory with practical exercises, tooling, and strategic preparation.

Milan, Italy

Lead the modernization of web and mobile systems, migrating legacy technology and improving scalability, reliability, and cross-platform usability.

• Develop Android and iOS applications alongside the core web platform.
• Work on Rush, a management platform for variables, alarms, connected devices, and automation logic.

Italy

European-level cybersecurity research and security-program design for SMEs strengthening physical and digital infrastructure.

• Worked across SIEM analysis, threat intelligence, web penetration testing, APT emulation, and risk assessment.
• Supported security initiatives aligned with relevant European frameworks and policy.

Turin and Warsaw

Monitored competition infrastructure, scoring, incidents, and rule disputes for ECSC 2024 and 2025.

• Investigated anomalies and documented resolutions for organizers and competitors.
• Helped protect the integrity and fairness of Europe’s leading cybersecurity competition.

Bari, Italy

Planned and delivered workshops on major web application and user-data vulnerabilities with the University and Polytechnic University of Bari.