Tobia Righi

Co-Founder

Malmo, Skåne County, Sweden4 yrs 10 mos experience

Most Likely To SwitchAI ML Practitioner

Key Highlights

Founder of TurtleSec, leading offensive security initiatives.
Expert in application security and vulnerability research.
Active contributor to bug bounty programs and security publications.

Stackforce AI infers this person is a cybersecurity expert with a focus on application security and vulnerability management.

Contact

Skills

Core Skills

Application SecuritySecurity ResearchPhpSecurity Implementation

Other Skills

Vulnerability AssessmentVulnerability ManagementPenetration TestingRed TeamingOWASPResearch SkillsVulnerability ResearchMachine LearningSoftwareData ScienceArtificial Intelligence (AI)Data MiningTensorFlowPython (Programming Language)OpenCV

Experience

4 yrs 10 mos

Total Experience

1 yr 6 mos

Average Tenure

2 yrs 3 mos

Current Experience

Turtlesec

Founder & Principal Consultant

Nov 2025 – Present · 6 mos · Gothenburg, Västra Götaland County, Sweden · Hybrid

Let hackers hack! Running TurtleSec to bring together offensive security consultants and researchers to deliver penetration tests and red teams to various organizations. Our work focuses on improving the security of high-impact and widely used technologies by finding, exploiting and publishing their flaws.

Application SecuritySecurity ResearchVulnerability AssessmentVulnerability ManagementPenetration TestingRed Teaming

Truesec

Pentester

Sep 2024 – Oct 2025 · 1 yr 1 mo · Malmo, Skåne County, Sweden · On-site

Self-employed

Security Researcher and Bug Hunter

Feb 2024 – Present · 2 yrs 3 mos · Malmo, Skåne County, Sweden · On-site

Deep diving into different topics in security to try to push the industry further, mostly focusing on identity and authentication protocols and solutions. All my research is funded through Bug Bounty Programs and published on my blog.

Application SecuritySecurity ResearchVulnerability AssessmentPenetration TestingOWASPResearch Skills+2

Synack red team

Security Researcher - Synack Red Team Member

Mar 2023 – May 2024 · 1 yr 2 mos · Remote

Hunting bugs on the SRT platform, mainly focused on Web and API testing.

Debricked

2 roles

Back End Developer

Promoted

Oct 2022 – Jan 2024 · 1 yr 3 mos

Working on the core features of Debricked's Software Composition Analysis and Open Source Health tools. Focusing a lot on our internal Application Security initiatives.