Ruggero Strabla Email & Phone Number

I have extensive experience in security assessment activities, for customers of medium / large size, in the banking and insurance areas, telecommunications, industry and services.Currently I am Head of Offensive Security Team at Horizon Security. I am involved in pre-sales activites related to security assessments and in creation and development of new security services.The main activities performed and managed are:- Vulnerability Assessment and Penetration Test of heterogeneous network infrastructure (public systems, internal, virtualized environments, Wi-Fi, DSL, Wireless Infrastructure and SCADA networks)- DDoS attacks simulations, leveraging the Amazon cloud infrastructure (EC2)- Email security analysis (assessment the MTA and MX servers, spoofing tests and verification of the SPF / DKIM / DMARC policies, dispatch of malware samples to test the effectiveness of anti-virus filters)- Analysis of web portals according to OWASP methodology- Static/dynamic analysis of mobile application and communication with the front-end systems- Cyber threat intelligence / Early Warning Activities through the analysis of public sources (OSINT)- Attacks simulation to employees clients through the dispatch of phishing-like emails and harmless malware- Analysis of the egress filtering policies and data exfiltration testOver the years I worked in three different SOC (Security Operations Center), performing the following tasks:- Second level analyst, in the field of the RTSM (Real Time Security Monitoring), to monitor attacks and manage security incidents.- Technical support in the start-up and definition of services to be delivered to Enterprise customers, by conducting the scouting of Log Management and SIEM platforms, MDM (Mobile Device Management), Anti-DDoS and Vulnerability Management solutions.- Vulnerability Manager for a worldwide distributed network.I also deal with pre-sales activities related to security assessment or ad-hoc security solutions.

Listed skills include Sicurezza Informatica, Penetration Testing, Web Application Security, Computer Security, and 27 others.