Satispay is a mobile payment solution to cut out inefficiencies in the financial system, creating a realrevolution in the way people think about money.As Group CISO I’m responsible for developing and implementing an information security program with the goal to protect Satispay’s communications, systems and assets from both internal and external threats; this includes:* Assessment and advisory activities both with internal stakeholders and third parties* Enforcement of company’s security policies on Satispay’s group devices (e.g. laptops, mobile devices) and systems and services (mostly on cloud)* Coordination of security checks (penetration tests and vulnerabilities assessments) with third parties and follow-up on the remediation plan with internal tech team* Define, implement and manage access policies on SaaS and on-prem environment with focus on least-privilege principle* Assess and enforce security policies and best practices on cloud environments* Define, implement and manage operational security on Satispay’s personal devices* Define a security event monitoring process* Handle security incidents process in coordination with internal and external stakeholders including escalation process* Push Security culture in Satispay’s Group

Cyber Saiyan is a no profit organization I founded on december 2017 to spread cyber security and ethical hacking culture.Since 2018 we organize RomHack, a cyber security conference held yearly in Rome. For its 5th anniversary the conference was held during RomHack Camp, an unforgettable hacker camp in Rome where people got together and shared their passionhttps://www.romhack.campOn March 2022 we published the web site https://www.guerredirete.it that is a cybersecurity news website we manage with Guerre di Rete non profit asssociationItalian website: https://www.cybersaiyan.it

I'm heading "Information, systems and network Security" in Security department.My team works to secure system and network resources and to protect the confidentiality, integrity and availability of ENAV information.I'm responsible for CERT-ENAV and Information Security Operation Center (i-SOC) activities.ENAV was awarded of "Excellence Award" by the European Commission on march 2019 for the implementation of its Security Operation Center.

Involved in ENAV Information Security Operation Center (i-SOC) engineering and operations. Lot of software (most open source) are part of ENAV i-SOC custom security application:- SPLUNK - www.splunk.com- OTRS - www.otrs.com- METASPLOIT - www.rapid7.com/products/metasploit- NESSUS - https://www.tenable.com/products/nessus-vulnerability-scanner- SNORT - www.snort.org- CHEF - www.chef.ioSecurity deputy in Integrated Project Teams, I do a lot of engineering, support and coordination for various internal and external projects.I also partecipate in international projects to evolve and consolidate Security in Air Traffic next generation systems and network.

Network engineering on service Network of Telecom Italia

Engineering consulting for Telecom Italia (Platforms Evolution)Project Leader (July 2009) of Telecom Italia TOP Customers consultancy group

Engineering, testing and management activities on the Edge Network of Telecom ItaliaActivities:- migration from Cisco 7500 to Cisco 10k edge routers for business customers- new DNS architecture engineering - test and validation of the new ENAV Italian optical network (Juniper M20 and M10i, Selex MFS ATM Switches, SAS1000 routers)

Involved in a new LAN Management project. The goal is to manage the BT customers LANs via CiscoWorksBackline support for IP MPLS TOP and TOP GOLD customers.Involved in backup test cases and network design verificationDuring these days I wrote from scratch (using Linux and Open Source technologies) a web appliance to give a fast and consistent access to the MPLS Italian network; this system provides integation with different local databases accessing ATM and Frame Relay interconnections. The project won the BT Global Services MiniCup, that is a worldwide challenge with focus on customer experience and business improvement.

Main areas of consulting activities:- network management and support

Managing Linux and Windows (Active Directory) systems on customers side providing interoperability; working with many Open Source software like DNS (Bind), Mail Server, (Sendmail, Postfix, Mimedefang, Spamassassin) DHCPNetwork administration (CISCO routers, catalyst and PIX firewall) and security related configurations (PIX Firewall, NAC)Customers support

Working as instructor on HP and GKN (Global Knowledge Network) training centers.Arguments covered: - networking - network security - HP/UX OS - Linux - Microsoft Windows Active Directory

During university time I was working as a consultant to build server-side and DB access components of many Web Sites.My skills - PHP programming - Mysql, Postgres, ORACLE DB - Apache WEB Server