Marco Grandi Email & Phone Number

Tradate, It

Xizhi District, New Taipei City, Tw

Main tasks and responsibilities:- Management of the company cyber security solutions(e.g. NextGen-AV, MDR/XDR, IDS/IPS, NextGen-FW, WAF, SIEM, LM, ...)- Collaboration with CISO, HQ and other regions Cyber Security Teams to ensureinterconnected cybersecurity protection and management of cyber security events- Cooperation with internal departments (eg. IT/Network Operations, Governance & RiskManagement, Compliance/Legal and regional teams) to provide cybersecurity guidance,enable control/monitoring and contact point/support- Cybersecurity events investigations/analysis, management and reporting- Cybersecurity Incident management (member of the company CSIRT team)- Vulnerability Management and Cyber Threat Intelligence for preemptive security- Conception, implementation and maintenance of security and privacy policies, baselines,processes and procedures in compliance with relevant regulations and standards- Delivery of cybersecurity awareness training for employees, ensuring proper educationabout current security threats, best practices, and compliance requirementsMain projects:- ISO 27001 Certification Path- Design and Implementation of CrowdStrike Falcon MDR- Design and Implementation of Cyber Threat Intelligence, based on OSINT and integratedwith company cyber security layers to provide custom protection from emerging threatsMain technologies/solutions in use:- CrowdStrike Falcon MDR- Trend Micro Endpoint Security Tools- Maltego- Cybersixgill- MS Azure- MS Defender 365- ManageEngine PAM360

Varese, Va, It

Main activities and responsibilities:- Management of the IT team- Conception, implementation and maintenance of IT systems, network infrastructures andcybersecurity solutions- Cooperation with internal departments and business partners to provide cybersecurityguidance, enable control/monitoring and contact point/support- Conception, implementation and maintenance of policies, baselines, processes andprocedures in compliance with relevant regulations and standardsParticipation in projects and courses:- ERP transition to SAP S4/HANAMain technologies/solutions in use:- Google G-Suite Business- Amazon AWS, Google Cloud Platform, MS Azure- MS Windows Server, Active Directory, Office 365- Sophos Central, Intercept X- VMware- SonicWall, DELL, Cisco- Wildix VoIP- IBM AS400, SAP S4/Hana

Milan, It

Main activities and responsibilities:- Management of the IT Team- Conception, implementation and maintenance of IT systems, network infrastructures andcybersecurity solutions for both the company and its customers- Cooperation with internal departments and business partners to provide cybersecurityguidance, enable control/monitoring and contact point/support- Conception, implementation and maintenance of policies, baselines, processes andprocedures in compliance with relevant regulations and standardsParticipation in projects and courses:- Internet of Things (IoT) solutions on the LoRA radio communication channel- Start-up of a business unit to provide Cyber Security training and services to local SMEsMain Technologies:- Apache, Tomcat, Elastic Search, Kibana, MySQL, MS SQL Server- PRTG, Zabbix, BareOS, VMExplorer, SnipeIT, Rattic, VMware ESX, VirtualBox- Google Suite, Atlassian Suite, Wordpress- OWASP ModSecurityWAF, Bitninja, Graylog, Sophos, Fortinet, OpenVAS, W3AF- CAINE, Autopsy, TSK, Kali, Parrot, BackBox, Caine

Turin, It

Main activities and responsibilities:- Management of the company cyber security solutions (e.g. WAF, IPS, Proxy, Anti-Malware,SIEM, Network Firewall, Log Management)- Cybersecurity events investigations/analysis, management and reporting- Cybersecurity Incident management (member of the company CSIRT team)- Collaboration with hired investigative agencies and law enforcement agencies involved inspecific investigation/search warranties- Computer forensics, malware analysis- Vulnerability Management and Cyber Threat Intelligence for preemptive securityParticipation in projects and courses:- Military-grade security solutions for sharing sensitive information (Boole Server)- Open-source Honeypot solutions (Dionaea, Kippo, Snort) for data center protection- Open-source automated malware analysis solutions (Cuckoo)- Publication of “eni ICT Security Report”(12 issues per year)Main Technologies:- Nagios, F5 WAF, ArcSight ESM, TippingPoint IPS, Blue Coat Secure Gateway- McAfee, Cuckoo- Nessus, Dionaea, Kippo- Encase SW Guidance, AccessData FTK- Kali, Parrot, BackBox, Caine

Assago - Milano, Lombardia, It

Main activities and responsibilities:- Management of the company IT and network infrastructures- Design and implementation of IT solutions for customersParticipation in projects and courses:- Google Apps Reseller Program for Italy (www.e-goo.it)Main Technologies:- Apache, Nginx, IIS, Tomcat, MySQL, MS SQL Server- PRTG, VMware ESX, VirtualBox, KVM- Google Suite, Zimbra, Wordpress, Tumblr

Bachelor’S Degree In Ict Security, Sicurezza Informatica

High School Certificate In Information And Communication Technology, Informatica, Sistemi