Professional profile
I learn security by putting my hands on systems and examining how they fail. My strongest evidence sits across Linux, containerized services, network traffic, and practical attack/defense: from a distributed CTF analysis tool to a Raspberry Pi homelab, security automation and ongoing HTB practice. I work confidently in English (C1) and am currently learning French.
Education & international experience
- Current
Politecnico di Torino
MSc Cybersecurity · Turin, Italy
Advanced study in cybersecurity with a direction toward infrastructure, container and network security.
- One academic year · 2025/26
Sabancı University
Erasmus exchange · Istanbul, Türkiye
One-year international study experience demonstrating independence, adaptability, English communication, and cross-cultural teamwork. Coursework included OT/ICS security and the AquaSecure collaborative project.
- Completed 2024
University of Turin
BSc Computer Science · Turin, Italy
Foundations in networks, operating systems, software development, and security. Thesis project: CTF Hammer.
CyberChallenge.IT Finalist · 8th Edition, 2024Represented the University of Turin after hands-on training in web, binary, crypto, network and Attack/Defense security challenges.
Selected security projects
CTF Hammer
Flagship · BSc thesis — A unified A/D CTF traffic-analysis workflow using tshark, async workers and a live web interface. CTF Hammer collects PCAP traffic from vulnerable hosts, parses conversations with tshark, classifies useful patterns, and streams results into a web interface. Async workers keep analysis away from the operator path; SSH/SCP and Docker Compose connect the pieces.
Smart HTA & JAR analyzer
Supporting security project — A Python analyzer for HTA/JAR feature extraction, explainable heuristics and model-assisted context. A modular pipeline extracts features from HTA and JAR files, applies explainable heuristic rules, and can ask language models for a second assessment. CLI entry points and functional tests make each stage inspectable.
AquaSecure
Sabancı coursework · Collaboration — A simulated water-treatment SCADA security exercise with Docker isolation and an SQLi → SSRF → Modbus write chain. The team isolated services with Docker networks and modeled an attack chain from SQL injection to SSRF and an unauthorized Modbus write. It demonstrates applying security concepts to an OT/ICS-shaped environment—not professional industrial-security expertise.
Leadership & operations
Il MuMa
Front-of-House Manager
Approx. 2024–present
Owns supplier orders, reservations, phone management, cash responsibility, linen inventory, team coordination, guest experience, and an 80+ label wine cellar.
- Ownership
- Composure under pressure
- Reliable communication
Osteria La Cantinella
Server / Front of house
Approx. Sep 2022–2024
Delivered attentive guest service in a fast-moving environment while coordinating clearly with the wider team.
- Reliability
- Service judgment
- Team coordination
Skills
Infrastructure & container operations
Linux-based Docker environments, service isolation, homelab operation, and controlled access.
Tools: Linux · Docker · Docker Compose · Docker networks · Tailscale · Cloudflare Tunnel
Security analysis & automation
Python security tooling and application/network-traffic analysis demonstrated through CTF Hammer, malware analysis, and HTB.
Tools: Python · tshark · Traffic analysis · Static analysis · Testing
Web & distributed systems
Connecting interfaces, APIs, workers, databases, and queues in end-to-end security projects.
Tools: Flask · TypeScript / Svelte · MongoDB · RabbitMQ / Celery · WebSockets
Current direction: container, infrastructure and network security. Evidence comes from self-hosted Linux services, Docker networking, traffic analysis and security tooling.
Languages
Evidence map
Skills are useful only when they connect to work. This map shows where each focus area is visible.