Open to opportunities

a s

@as07

Message

I lead offensive security teams and build continuous pentesting platforms.

Italy

Message

What I'm looking for

I'm looking to lead and improve offensive security delivery, build capable teams and tooling, and work on complex red team, application, infrastructure, and IoT/OT security challenges.

I lead Yalla Security's offensive security practice and own OrionAI, an agentic continuous-pentest platform for continuous VA/PT, external attack surface management, and vulnerability management. I build and mentor specialists, define testing methodology and reporting standards, and oversee red team, web, mobile, infrastructure, IoT/OT, and humanoid-robotics assessments.

Previously, I delivered enterprise penetration tests and red team operations at Capgemini and Hacktive Security, including ARM firmware reverse engineering, Active Directory attack-path analysis, EDR-evasion tooling, and live-hardware attack paths. I've disclosed two WordPress-plugin CVEs, contributed to SPartan, spoken at HackInBo and Cyber Frontiers, and bring an earlier software-development background to manual code review and offensive tool building.

Experience

Work history, roles, and key accomplishments

Current

Head of Offensive Security

Current

Yalla Security

Mar 2025 - Present (1 year 5 months)

Lead the offensive security practice, building and mentoring a team of specialists and owning technical quality end to end. Define testing methodology, tooling stack, and reporting standards, and serve as technical owner of OrionAI, a continuous offensive security platform.

Offensive Security Team Leadership Penetration Testing Red Teaming Methodology Development Tooling Client Management Pre Sales Web Security Mobile Security Infrastructure Security Humanoid Robotics

Penetration Tester

Capgemini

Apr 2023 - Mar 2025 (1 year 11 months)

Delivered web, mobile, and infrastructure penetration tests and vulnerability assessments for enterprise clients. Specialized in IoT/OT, including smart metering and gas-utility devices, with radio analysis, Bluetooth attack paths, and firmware reverse engineering.

Penetration Testing Web Security Mobile Security Infrastructure Security IoT Smart Metering Bluetooth Firmware Reverse Engineering Arm Red Teaming Active Directory Risk Assessment Reporting

Penetration Tester

Hacktive Security

Mar 2020 - Mar 2023 (3 years)

Executed web, mobile, infrastructure, IoT, Wi-Fi, and radio assessments, plus Active Directory red teaming. Performed manual source code review, identified and coordinated disclosure of two CVEs, and contributed to the SPartan tool.