Lead Engineer

• Nov 2014 - Present

QA System/Software Engineer

• Feb 2006 - Oct 2014

QA Automation Testing for IPS and NGFW devices - Senior Developer of QA Framework to test HP TippingPoint NGFW and IPS devices. - Development of Automated Framework for continuous testing, covering Unit Testing, Functional Testing, System Testing, Regression Testing. - Test planning, definition of goals, scenarios and development of the necessary code using various technologies including Python, Perl, PHP, Bash scripting, MySQL/PostgreSQL, Java. - Quality Control with execution of test cases and analysis of results. Bug reporting and unit debugging to support developers’ bugs fixing. - Agile development methodology - OO programming - Versioning systems (git, svn) - Software Development Life Cycle - Lead work to port various new HP IPS and NGFW technologies under the umbrella of the company’s automation framework. - Management and administration of virtualised rigs using VMware ESXi servers - Responsible for the maintenance of several automation racks including multiple blades servers, a large number of IPS and NGFW devices. - Development of support for HP H3C SecBlades for HP Threat Management Center involving development in JSP, PostgreSQL with High Availability clusters. Show less

Security Consultant

• Jul 2005 - Dec 2005

Security Analyst consultancy for the online UNEP project - Delivered thorough security assessment of a major UN web application. - Assessment involved both online testing (with 3rd party tools and custom made scripts) as well as source code auditing. Numerous vulnerabilities identified and efficiently patched. - Project was deemed a valuable success and it is now being used by the Environmental Programme of United Nations. Security Analyst consultancy for the online UNEP project - Delivered thorough security assessment of a major UN web application. - Assessment involved both online testing (with 3rd party tools and custom made scripts) as well as source code auditing. Numerous vulnerabilities identified and efficiently patched. - Project was deemed a valuable success and it is now being used by the Environmental Programme of United Nations.

Security Analyst

• Sep 2000 - Jun 2005

Security Analyst, Ethical Hacking and Penetration Test assessments - Developed and supported Security Management for Financial Projects with Banks and Financial Holdings. Developing Security Policies, VPN and Intranet Networks. - Leading role in the development of mi2g’s Intelligence Reports, quoted also by The eCommerce and Development Report 2003 published by the United Nations Conference on Trade and Development (UNCTAD) [http://www.unctad.org/en/docs/ecdr2003_en.pdf] and The Computer Security Institute (CSI) / Federal Bureau of Investigation (FBI) Computer Security Issues and Trends Survey [Vol. VIII, No. 1 - Spring 2002]. - Responsible for multinational relations, including presenting and educating senior management about their IT security options across the globe. Implemented security solutions resulting in immediate cost benefits, and increased grading of security levels of financial institutions. - Embraced a hands on approach to IT security. This included the development of Penetration test assessments and reports, monitoring of underground newsgroups and web sites to keep up with the disclosure of new vulnerabilities, creation and management of large databases of viruses and exploit tools. - Initiated and ran internal training of Security, Database, Programming and Servers Management. - Drove strategic review of the companies’ security propositions, producing security audit and feasibility studies. Show less

Manager

• Jan 1997 - Sep 2000

Chief Technical Officer - Design and implementation of online CRFs using OpenClinica. - Provided IT Management, Project Management and Web Applications Development for clients across Europe. - Established Internet servers and services using multiple standard protocols including HTTP and HTTPS for Web Servers, POP3, IMAP, SMTP, SASL, TLS for Mail Servers, LDAP and SQL for centralised authentication. - Development of Web applications using common languages including PHP, Perl, Shell Scripts, SQL, JSP Show less

Consultant

• Jan 1998 - Dec 1998

IT and Security Consultancy for the first online portal of Italian Language and Culture (www.italica.rai.it) IT and Security Consultancy for the first online portal of Italian Language and Culture (www.italica.rai.it)

System Administrator

• 1995 - 1997

IT management of MGE BBS and Internet service provider IT management of MGE BBS and Internet service provider