Andrea Ceresoni

- Evaluating and increasing the security of all projects and platforms developed by the team - Coordinating DevOps and security teams to build secure infrastructures by design - Threat and Risk Assessments and IT Security reviews to assess business and technology risks - Developing IT Security Governance structure to reduce risks in business processes, enhance information security, and comply with regulatory requirements for https://io.italia.it/

Drafting and Implementing Security best practices regarding Fastcloud (iaas) offer. Designing and implementing the security pipeline for Openshift clusters app. Drafting and implementing the new offer of MSSP SIEM Tuning of WAF system. ( both closed and open source) . Designing and implementing a cyber security threat intelligence. Incident Handling and response for critical incidents. Scripting firewall & IPS deployment.

Designing and Building a sustainable scalable automated infrastructure. Defining and implementing system reporting and infrastructure monitoring. Driving security external and internal security audits Drafting and enforcing of Security policies Designing and monitoring security of the cloud fleet Designing disaster recovery & failover

-Driving security scan compliance projects (e.g. PCIDSS, SOX) -Incident Handling and response for critical incidents. -Incident investigation. -Recovering from computer attacks and restoring systems for business. -Providing support for all information security related issues. - Troubleshooting issues affecting the security of Amazon’s computing resources Respond appropriately to external and internal threats DDoS mitigation

- Configuration and tuning of Intrusion detection systems - Configuration of anti-DDoS devices. - Reacting on on-call rota to DDoS Attacks, - Drafting report of cybersecurity attacks. - Day by day I was concerned about understanding current vulnerabilities, attacks, and countermeasures and in providing technical assistance for any issue regarding system operation and system violations. - Writing and analyzing correlation rules for Siem systems.

- Designing and installing authentication system of security devices. - Building and maintaining the security devices monitoring system. - Installing configuring and maintaining firewalls for 3 datacenters. - Tuning of Intrusion detection system across 2 datacenter. - Writing technical documentation about tuning methodologies and systems maintenance.