Edoardo Ottavianelli

DevOps Engineer

Rome, Latium, Italy2 yrs 9 mos experience

Most Likely To Switch

Key Highlights

Identified over 300 security vulnerabilities for high-profile clients.
Contributed to open source with 80+ repositories and 18k+ stars.
Designed innovative security frameworks for network environments.

Stackforce AI infers this person is a Cybersecurity Expert specializing in Vulnerability Research and Penetration Testing.

Contact

Skills

Core Skills

Penetration TestingSecurity ConsultingSoftware DevelopmentSecurity ResearchCyber-securityNetwork SecurityInformation Security

Other Skills

Web Application SecurityVulnerability ResearchIT Security AssessmentsProject ManagementApplication SecuritySoftware open sourceNetworkingEnterprise Network SecurityLog AnalysisThreat DetectionPythonVulnerability AssessmentEthical HackingWeb Application Security AssessmentAPI Development

About

As Security Researcher I have researched complex network attacks and designed new methods to spot and defeat them, discovered many vulnerabilities in web and network applications and proposed new attack methodologies, resulting in multiple CVEs and publications. I hold a Master's Degree in Cybersecurity, a Bachelor's Degree in Computer Science and multiple certifications. I have also been an active Open Source Developer since 2018, with over 80 repositories and 18k+ stars on GitHub. I am interested in job offers that align with my values, motivations, and goals. Providing this information will save us both valuable time. Please do not call me if you find my phone number somewhere, but feel free to reach out to me via email or LinkedIn. You can find more information about me on edoardottt.com.

Experience

Hacktive security

Senior Penetration Tester

Mar 2024 – Present · 2 yrs 1 mo · Remote

Conducted penetration tests for many companies, identified high-severity vulnerabilities in web applications, network infrastructures, APIs and desktop clients.
Delivered detailed, high-quality reports outlining vulnerabilities, potential impact and actionable remediation steps, enhancing clients' security posture.
Performed advanced research initiatives and contributed to the development of security tools.

Security ConsultingPenetration TestingWeb Application SecurityVulnerability ResearchIT Security AssessmentsProject Management

Consorzio per la ricerca nell'automatica e nelle telecomunicazioni

Network Security Researcher

Sep 2023 – Feb 2024 · 5 mos · Rome, Latium, Italy · Remote

For the PANTSAT project, commissioned by the European Space Agency (ESA):
◦ Studied and defined system scenarios, technical requirements and specifications for a new communication protocol for satellite networks
◦ Reviewed designs and implementations of various state-of-the-art network protocols for compatibility and security standards.

Cyber-securityNetworkingEnterprise Network SecurityNetwork SecuritySecurity Research

Sapienza università di roma

Security Researcher

Jun 2023 – Feb 2024 · 8 mos · Rome, Latium, Italy · Remote

Received a research grant at DIET Department to continue the studies on security in programmable networks.
◦ Designed, implemented and tested an innovative framework for anomalies and attacks detection in network environments through log analysis using Python and Bash.
◦ Discovered vulnerabilities (CVEs) and new attack methodologies through testing, static and dynamic analysis in network applications written in Java.
◦ https://bit.ly/cap-security-research

Web Application SecurityApplication SecurityLog AnalysisCyber-securityThreat DetectionPython+4

Bugcrowd

Security Researcher

Nov 2021 – Nov 2023 · 2 yrs · Remote

◦ Successfully identified and reported 300+ security vulnerabilities in high-profile companies and U.S. Government offices, with a specialization in web and network applications.
◦ Recognized for outstanding work by reaching second place at the Cybersecurity and Infrastructure Security Agency 2021 Competition. Third place overall on Researcher Leaderboard Valid Submissions Since Launch

Ethical HackingWeb Application SecurityApplication SecurityIT Security AssessmentsCyber-securityWeb Application Security Assessment+3

Sapienza università di roma

Software Developer

Mar 2020 – Oct 2020 · 7 mos · Rome, Latium, Italy · Hybrid

◦ SeismoCloud EUD system: Designed, implemented and secured an user-friendly End User Development system (Docker, NodeJS) to enable non-technical users to configure and control networks of IoT devices and online services (e.g. automate actions such as sending Telegram/Email messages and posting tweets through IoT devices data).
◦ API development: Resolved issues in the SeismoCloud REST API system (Golang) providing information on Sensors signalings, devices and users’ data, as well as associated statistics.
seismocloud.com
https://edoardottt.com/blog/bachelor-thesis.pdf
ceur-ws.org/Vol-2702/EMPATHY_2020_paper_10.pdf

Ethical HackingInformation SecurityAPI DevelopmentGoBack-End Web DevelopmentSoftware Development