At CyberSA Srl, I monitor a DORA-regulated client's Microsoft 365 environment using ManageEngine Log360. I'm the sole analyst dedicated to its internal SOC, where I triage alerts, apply incident response playbooks, and tune detections to manage false positives.
At CyberSA Srl, I also worked on KPMG's internal SOC, monitoring Microsoft Defender XDR across endpoints, identities, and Office 365. I investigated alerts across domains, handled real phishing campaigns and IoCs, and supported incident response and investigative reporting.
At 5Emme Informatica S.p.A., I monitored security events in the C.O.R. Difesa – Comando per le Operazioni in Rete environment using IBM QRadar. My work included first-level incident handling, log and network traffic analysis, malware sandbox analysis, and correlation rule tuning.
I hold Cisco Network Technician, Splunk Accredited Technical Selling Foundations, and Pentera Certified Platform Specialist certifications. My hands-on tools include Splunk, Wireshark, and Wazuh, alongside foundational Python and web development skills.
