Performed web and mobile application code reviews, penetration testing and design reviews. Reverse engineering was often required when reviewing certain applications.Perform internal, external and wireless network reviews.Perform network device security reviews.Aura provides a two days secure coding service to clients that are interested in upskilling their developers with secure coding best practises. I was the trainer lead in my last few months in the company.Been involved in a few months ongoing engagement with a financial institution client to help them design and build a secure fast data platform, deployed in AWS, using Apache Spark and Cassandra.Work with clients to understand their requirements (scoping meetings).Research: explored ways to abuse Service Workers in order to gain some kind of XSS persistence and developed a Browser Exploitation Framework (BeEF) persistence module. Also, I conducted research analysing some mobile applications, which led to some critical issues identified and reported to the maintainers.

Taking overall ownership and responsibility of the system architecture and infrastructure requirements, including areas such as security, performance, scalability and redundancy.Working with the Product manager to recruit new staff and grow the company development team as required.Training, mentoring and supporting other developers in the team.Code reviews (as appropriate) to ensure that the codebase is maintained to a high standardWorking with the Product manager to set priorities and assign work to other members of the team.Working closely at both a strategic and technical level with technical staff in other organisations on new product initiatives aimed at fostering partnerships and joint ventures.Working with the Product Manager to set performance expectations and undertake performance reviews for development staff.Identifying and evaluating new technologies.Overseeing all development activities to ensure that the product is developed, maintained and documented to a high standard.

Development and maintenance of the web application and website.Coding, integration and deployment of the new product features and enhancements.Writing and maintaining unit, functional and integration test.Bug fixes and high level technical support.Monitoring and maintaining the Sharesight server infrastructure.Assisting with the design of new features and evaluation of new technologies which can be utilized to improve customer experience.Security analysis of the product and server infrastructure; code review from security point of view, security consideration of actual logic flaw, information disclosure analysis. Involving other company developers on implementing code to react to possible malicious attacks.Technologies: Ruby on Rails, MySQL, oauth API integration, Linux / Apache / Nginx / HaProxy / Redis / shell scripting / test driven development.

Web developer (Ruby on Rails, PHP) – web and APIs, Flex development for Esri ArcGIS, Linux installation/configuration, systems/applications support rooster after work hours. - Development and support of websites to ensure quality user experiences- Maximising performance and availability of the websites- Contributing to the on-going infrastructure design and development to support online products and services- Liaising when required with clients, partners and staff to optimise thedevelopment and support of the company’s products and services- Providing technical assistance

Hardware support, application support, operation support, server installation / configuration / tuning / administration, web developer (PHP, Java), reporting (SQL).

Web developer: PHP, PHP Zend framework, Java (Hibernate, PHP-Java bridge), MySQL, SQL Server, ASP, Javascript, Ajax, VB script, Visual Basic for Office macro, web design (CSS, Ajax effects). System configuration: Linux server installation and configuration.

For Obliquid- Web site migration from a server to another; - development of a PHP API for online PayPal payment (customer Kines); - development of new features for a web applications (Java, PHP, PHP Obliquid framework, MySql, JavaBrigde) for customer Yamaha.- development of new features for Java web applications.Java development and Linux system engineering (systems hardening): - web application development of new features of a Java web management application (J2EE, Struts, Tapestry, Oracle, Postgres) for Ferrovie Nord; development of a webapplication (J2EE - framework Nordcom, mysql) for a document management system; - Linux server installation for Obliquid and for Yamaha (system installation, kernel hardening, iptables and services configuration).For IMI Srl:- Penetration test for 3 their costumers; - Linux server configuration (operating system installation, kernel configuration, services configurations: iptables, sendmail, logrotate, syslog-ng, denyhost; bash scripts).For Gecosistemi:- Java web application development with AS/400 database (application for a gas distribution company; used technologies: Java Servlet, Jsp, DB2 on AS/400);- applications development; - Windows systems engineering c/o customers (client installations, PC and printersconfigurations, Windows NT Server configurations and SMTP Lotus Notes mail server management).- Penetration testFor Txt Polymedia:Senior consultant -> Application support c/o Vodafone; production systems management; DB Oracle data query and analysis; shell and Perl scripting for Unix systems analysis and reports; application release, applications management (Mediation, Commissioning, RTX Server, Interconnect, Ckm, Campaign Manager). Availability for working night/weekend (shifts) in case of application problems.

Client/Server Windows management; network management; devices configurations (PC, PDA, printers, etc..); AS/400 base troubleshooting.

- Java web application development with AS/400 database (application for a gas distribution company; used technologies: Java Servlet, Jsp, DB2 on AS/400);- applications development; - Windows systems engineering c/o customers (client installations, PC and printersconfigurations, Windows NT Server configurations and SMTP Lotus Notes mail server management).