Who am i

I am a 25-year-old guy graduate in cybersecurity, currently working as an Offensive Security Specialist. In my role, I perform various types of penetration tests to strengthen the security posture of organizations. In my spare time, I actively participate in Bug Bounty programs and engage in Capture The Flag (CTF) challenges and practice on various vulnerable labs (HackTheBox) to enhance my skills in ethical hacking and red teaming. I am also passionate about sports, having practiced kickboxing for 13 years, including 10 years at a competitive level. Currently, I practice CrossFit to maintain my fitness and discipline.

Experience

  • Offensive Security Specialist at EY
    Nov 2024 - Present

    • Web Application Penetration Tests
    • Mobile Application Penetration Tests
    • Network Penetration Tests
    • Red Teaming
  • Security Engineer - Penetration Tester at Secure Network
    Dec 2023 - Nov 2024

    • Web Application Penetration Tests
    • Mobile Application Penetration Tests
    • Network Penetration Tests
  • Cyber Security Specialist - SOC Analyst at Elmec Informatica S.p.A. (Cybergon) Sep 2022 - Dec 2023

    • SOC Analyst: management and analysis of reports collected by the XDR and Intrusion Detection System (IDS) probe using SIEM
    • OSINT: performed OSINT activities on apex figures and domains
    • PhaaS: conducted Phishing campaigns
    • CVE: analysis and evaluation of CVEs based on the CVSS
  • Fullstack Developer
    Feb 2022 - Jun 2022

    • Bachelor’s thesis: “Implementation of a web platform for performance analysis of a private Ethereum-based blockchain.”

Education

  • Master Degree in Cybersecurity
    University of Study of Milan, 2022-2024

  • Bachelor Degree in Computer Science
    University of Study of Milan-Bicocca, 2019-2022

Certifications

CRTECRTE - Certified Red Team Expert (05/2026 - 05/2029)
CRTOCRTO - Certified Red Team Operator
eWPTXeWPTX - Web Application Penetration Tester eXtreme (03/2026 - 03/2029)
BSCPBSCP - Burp Suite Certified Practitioner (22/04/2025 - 22/04/2031)
CPTSCPTS - Certified Penetration Testing Specialist
CBBHCBBH - Certified Bug Bounty Hunter
LFCSLFCS - SysAdmin (04/2023 - 04/2026)

CVEs

MoonShine Software

CVE-2025-51487Stored XSS
CVE-2025-51488Stored XSS
CVE-2025-51489Stored XSS
CVE-2025-51510SQL Injection