Emanuele Cabras Email & Phone Number

Zurigo, Zurigo, Svizzera

● Performing smart contract security reviews for projects on the Tezos blockchain, analyzing contracts written in SmartPy and Ligo (CameLIGO, JSLIGO)● Performing low-level, virtual machine code reviews in Michelson to identify potential flaws and spot optimizations to save gas ● Performing smart contract security reviews for EVM-based blockchains, mainly for projects written in Solidity ● Study and analysis of DeFi solutions implemented on Tezos and EVM-based blockchains

Roma, Lazio, Italia

● Perform web application and infrastructural penetration tests, identifying vulnerabilities and estimating the impact of a possible exploitation of these flaws. At the end of my testing period, I also create a report with an executive-level review of the findings and a detailed, technical analysis of the flaws, the steps taken to identify them, the possible exploits that can be run and actionable countermeasures that can prevent malicious agents’ attacks on the organization● Perform vulnerability assessments and code review using automated tools like Nessus, Coverity Analysis, Burp Pro, OWASP ZAP, etc. to identify outdated, flawed software versions or bad coding practices that can lead to exploitation from malicious agents● Created technical content for cybersecurity awareness programs designed for IT administrators and help desk technicians, with evidence of common attacks and detection mechanisms to identify them in their organizations’ networks● Created non-technical content to raise the level of awareness in other categories of employees, focusing on phishing identification and common social engineering techniques● Developed an automated solution using Python and Power Automate to analyze email reports of potential abuse from a client’s employees

Roma, Lazio, Italia

● I was tasked with performing black box and white box penetration testing of web applications, providing a report that detailed findings, criticality and exploitability of these flaws and possible solutions to fix or mitigate them, in order to improve the client’s overall security posture ● Alongside this main task, I also offered post-reporting support in the form of re-testing after the client fixed the reported issues, but also consulting services during the fixing, providing my insight regarding whether a defence mechanism would be more appropriate than its alternatives, and whether business needs could meet halfway with the security needs detailed in my report