Who am i
I am a 25-year-old guy graduate in cybersecurity, currently working as an Offensive Security Specialist. In my role, I perform various types of penetration tests to strengthen the security posture of organizations. In my spare time, I actively participate in Bug Bounty programs and engage in Capture The Flag (CTF) challenges and practice on various vulnerable labs (HackTheBox) to enhance my skills in ethical hacking and red teaming. I am also passionate about sports, having practiced kickboxing for 13 years, including 10 years at a competitive level. Currently, I practice CrossFit to maintain my fitness and discipline.
Experience
Offensive Security Specialist at EY
Nov 2024 - Present- Web Application Penetration Tests
- Mobile Application Penetration Tests
- Network Penetration Tests
- Red Teaming
Security Engineer - Penetration Tester at Secure Network
Dec 2023 - Nov 2024- Web Application Penetration Tests
- Mobile Application Penetration Tests
- Network Penetration Tests
Cyber Security Specialist - SOC Analyst at Elmec Informatica S.p.A. (Cybergon) Sep 2022 - Dec 2023
- SOC Analyst: management and analysis of reports collected by the XDR and Intrusion Detection System (IDS) probe using SIEM
- OSINT: performed OSINT activities on apex figures and domains
- PhaaS: conducted Phishing campaigns
- CVE: analysis and evaluation of CVEs based on the CVSS
Fullstack Developer
Feb 2022 - Jun 2022- Bachelor’s thesis: “Implementation of a web platform for performance analysis of a private Ethereum-based blockchain.”
Education
Master Degree in Cybersecurity
University of Study of Milan, 2022-2024Bachelor Degree in Computer Science
University of Study of Milan-Bicocca, 2019-2022
Certifications
![]() | CRTE - Certified Red Team Expert (05/2026 - 05/2029) |
![]() | CRTO - Certified Red Team Operator |
![]() | eWPTX - Web Application Penetration Tester eXtreme (03/2026 - 03/2029) |
![]() | BSCP - Burp Suite Certified Practitioner (22/04/2025 - 22/04/2031) |
![]() | CPTS - Certified Penetration Testing Specialist |
![]() | CBBH - Certified Bug Bounty Hunter |
![]() | LFCS - SysAdmin (04/2023 - 04/2026) |
CVEs
MoonShine Software
| CVE-2025-51487 | Stored XSS |
| CVE-2025-51488 | Stored XSS |
| CVE-2025-51489 | Stored XSS |
| CVE-2025-51510 | SQL Injection |






