Offensive security & application security engineer based in Rome, Italy. I focus on web/API pentesting, vulnerability research, and secure software development across .NET, Node.js, and Java/Spring stacks.

• 🔭 Currently a Cybersecurity Engineer Consultant at Akkodis — secure coding training, threat modelling, and CRA/NIS2 compliance work
• 🎯 20+ paid vulnerabilities disclosed via HackerOne & Intigriti — OAuth weaknesses, DOM-based XSS, business logic flaws, WAF/Cloudflare bypasses
• 🛠️ DevSecOps: SAST/DAST/SCA integration in CI/CD (Snyk, SonarQube, Black Duck)
• 🎓 BSc Computer Science, Sapienza University of Rome (expected Dec 2026)
• 🏆 Team Leader, Sapienza CyberChallenge.IT 2022 — 5th place nationally

Security: Web/API/mobile pentesting · OWASP Top 10 · business logic · threat modelling · secure code review Languages & Cloud: Python · Bash · .NET · Node.js · Java/Spring · AWS · Azure · Docker Tools: Burp Suite · Nmap · ffuf · SQLMap