Open to opportunities

Giovannino Orlando

@giovanninoorlando

Message

I build and operate SOCs that accelerate incident detection and strengthen mission-critical security.

Italy

Message

What I'm looking for

I'm looking to deepen my impact in security operations, incident response, SIEM engineering, and automation, ideally on mission-critical environments where I can improve detection, response, and operational resilience.

At Thales Italia, embedded on a strategic space programme at Thales Alenia Space, I contribute to security operations across detection, endpoint, and SIEM workstreams.

Previously at IT Centric, I designed and productionised a SOC for more than 2,000 endpoints in an air-gapped government environment. I owned critical incident triage, troubleshooting, cross-team coordination, root cause analysis, and technical and executive reporting, while reducing critical-incident MTTD from days to approximately two hours through Palo Alto XSOAR automation.

I've delivered zero-downtime Splunk cluster upgrades, Python health-check automation, HA/DR designs, offline patch management, and endpoint-security operations. I also build practical security tooling, including a CVE-monitoring CTI platform and threat-hunting playbooks mapped to MITRE ATT&CK.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Operations Engineer

Current

Thales Italia

May 2026 - Present (3 months)

Embedded SecOps engineer on a strategic space programme, contributing to security operations across detection, endpoint and SIEM workstreams.

Security Operations SIEM Endpoint Security Detection Engineering

Security Operations Center Analyst & Engineer

IT Centric

Mar 2024 - May 2026 (2 years 2 months)

Designed and productionised a complete SOC for 2,000+ endpoints, reducing MTTD for critical incidents from days to ~2 hours through automation. Acted as technical first responder on critical incidents, owning end-to-end triage, troubleshooting, coordination, and root cause analysis.

SoC Design Incident Response Splunk Python Agile Scrum Sysmon

Network Security Engineer

IT Centric

Sep 2023 - Mar 2024 (6 months)

Performed perimeter security operations including firewalls, IDS/IPS, VPN, email/web security on Cisco ESA/WSA, and traffic analysis in support of Blue Team activities.

Firewalls IPS VPN Cisco WSA Traffic Analysis Blue Team