Open to opportunities

Filippo Maestri

@filippomaestri

Message

Penetration Tester specializing in web, mobile, and network security with OWASP-driven vulnerability assessments.

Colombia

Message

What I'm looking for

I’m looking to deepen my offensive security impact by running real-world web, mobile, and network assessments, automating repeatable testing, and delivering OWASP-aligned findings that help teams patch quickly with strong security outcomes.

I’m a Certified Cybersecurity Professional currently working as a Penetration Tester at Antifraude in Miami/Bogotá. I focus on turning offensive security findings into clear, actionable insights for both technical and executive stakeholders.

My work includes conducting black-box, gray-box, and white-box penetration tests across web applications, mobile applications, and network infrastructures for international clients. I perform vulnerability assessments with automated tools like Nessus and Burp Suite Pro, then validate results through manual exploitation using OWASP Top 10 and PTES methodologies.

I regularly identify and exploit issues such as IDOR and Broken Access Control, and I draft detailed remediation reports. I also collaborate with development teams to patch security flaws and automate routine scanning tasks using Python and Bash scripts to improve efficiency.

Before this role, I completed an intensive cybersecurity apprenticeship at Betek, where I executed penetration testing exercises in simulated environments and built custom tools like a Subdomain scanner and a Web fuzzer. I continue to invest in learning through certifications including eWPT and eJPT, plus focused training in Python/Bash and Linux hardening.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

Antifraude

Aug 2025 - Present (11 months)

Conduct black-box, gray-box, and white-box penetration tests on web applications, mobile applications, and network infrastructures for international clients. Perform vulnerability assessments, exploit OWASP-aligned issues, and deliver remediation-focused findings to technical and executive stakeholders.

Black Box Testing White Box Testing Network Security Vulnerability Assessment Nessus OWASP Top 10 IDOR remediation Python BASH

Cybersecurity Apprentice

Betek

Jan 2024 - Present (2 years 6 months)

Completed offensive security apprenticeship training focused on conducting penetration testing exercises in simulated environments. Built custom reconnaissance and testing tools and practiced Linux hardening and log analysis for intrusion detection.

Penetration Testing Log Analysis Intrusion Detection Reconnaissance Automation

Education

Degrees, certifications, and relevant coursework

eLearnSecurity (INE)

eJPT, Penetration Testing

Completed the eJPT certification for junior-level penetration testing fundamentals and practical exercises.

eLearnSecurity (INE)

eWPT, Web Penetration Testing

Completed the eWPT certification focused on web penetration testing skills and assessment methodologies.

Hack4u

Coursework, Python and Bash

Completed coursework in Python and Bash to support scripting and security automation tasks.

Betek

Cybersecurity Analysis (290 hours), Cybersecurity Analysis

Activities and societies: Coursework included offensive security exercises in simulated environments; created custom tools for reconnaissance automation.

Completed a Cybersecurity Analysis course (290 hours) covering practical offensive security and analysis techniques.