I currently am the Global Head of Security Technology at Trafigura. I work closely with the CISO to define and implement the overall security strategy of the company and of its subsidiaries. My main focus at the moment is on financial cryptography, payment security, and on the intersection between machine learning and security, but I lead activities that include all flavors of IT security ranging from high-level threat analysis down to reverse engineering of binary applications.I have two decades of experience in computer security, assisting a multitude of companies in different sectors, including telecommunications, government, banking, insurance and media. I have been involved in a broad range of projects dealing with penetration testing, product selection, secure network design, incident response, fraud analysis, protocol analysis, threat intelligence, counter surveillance.I am the developer of sqlninja, an open source exploitation toolkit that has become the "weapon of choice" when performing SQL Injection attacks against applications that use SQL Server as their backend DB. I am a contributing author of both editions of the book "SQL Injection Attacks and Defense" (ISBN: 978-1597494243 and 978-1597499637).I have co-authored the OWASP Testing Guide and have been invited as a speaker to several IT security conferences, such as EuSecWest, SOURCE, RSA (but way before they talked about moving TCP/IP into the blockchain), Ruxcon, 44Con, CONFidence, Shakacon, and AthCon.My technical expertise is combined with skills more oriented to management and business building, thanks to my experience in McKinsey & C. first, and then in Spike Reply, which I helped to grow from a start-up of 3 people into a leader in the Italian security arena, with 40+ consultants and with offices in Milan and Rome, within a space of 3 years.I don't have fancy 4-letter or 5-letter certifications, mostly because I am usually busy doing real stuff.