Today I lead security for an Italian industrial group: three sites, more than a hundred construction sites, OT networks. I took it to ISO/IEC 27001 certification and aligned it with NIS2 although it was not required to; I direct the external MDR service, answer to the auditor and discuss security decisions with the board. As a consultant I have taken another company to the same certification.
I learned the trade in the United States, in Maryland. In college, the professor who ran the cybersecurity club, who serves at the US Department of Defense, took me under her wing and brought me into the UAS Research and Operations Center at the University of Maryland, working on counter-drone research to protect sensitive sites: detecting hostile drones in flight, geolocating them and neutralising them by jamming. I brought home a method I never let go of, «security is learned by attacking and proven by holding», and one certainty: there are no shortcuts, only foundations.
On those foundations I co-founded Securitix Solutions, where as CTO I designed and shipped the company’s security platforms: XDR, threat intelligence, deception, phishing simulation and Velo, the gateway that makes generative AI adoptable under GDPR. With a network of trusted engineers I deliver consulting engagements, from forensic acquisition to NIS2 training.
Research is what keeps it all honest: more than twenty assigned CVEs, coordinated disclosures with vendors such as AWS and Anthropic, and a growing focus on the security of AI systems. It is why the programmes I build start from how attacks really happen, not from a checklist. And they stay close to where I started, Taranto: serious defences for those who usually can’t afford them, and training before anything else.
The industrial group’s sole in-house security function: I set the strategy and I am accountable for it. I took the group to ISO/IEC 27001 certification and voluntarily aligned it with NIS2; I direct the external MDR service and one in-house engineer; I run internal penetration tests; I report to the IT Director and support the Board through customer-led security audits.
Managed security and consulting. With the CEO and the Chairman I shape the offering and technical priorities; I designed and shipped the company’s platforms (Presidio XDR, Valta, Mirage, Velo...); I coordinate a network of five freelance engineers on consulting engagements. A partner in Anthropic’s Claude Partner Network, selected for the Google for Startups Cloud Program.
Led the company through ISO/IEC 27001 certification, from programme set-up to award.
Defence research at the UAS Research and Operations Center on protecting sensitive sites from hostile drones: in-flight detection, geolocation and neutralisation by jamming. Brought in by the college's cybersecurity club lead, who serves at the US Department of Defense.
Technical support and maintenance of the campus IT infrastructure alongside my Cybersecurity studies: 200+ IT assets managed, 300-400 tickets with a median resolution time of about one day.
Remote IT support for 1,000+ users: real-time troubleshooting and issue resolution, 95% satisfaction.