# Luciano Ciattaglia Luciano Ciattaglia is a remote worker on Himalayas, Information Security Officer at Wio Bank PJSC, based in United Arab Emirates. Source: https://himalayas.app/@lucianociattaglia ```text Information Security Officer at Wio Bank PJSC building institutional custody infrastructure with self-custody MPC. ``` | Detail | Value | | --- | --- | | Availability | Open to opportunities | | Location | United Arab Emirates | | Authorized to work in | United Arab Emirates | | Salary expectations | 200k+ USD | | Job categories | Information Security Officer, Cybersecurity Engineer, Application Security Engineer, Blockchain Security Engineer, Security Services Manager, AI Engineer | | Skills | Infosec, Cybersecurity, Security Leadership, Blockchain Security, Smart Contract Security, Application Security, Offensive Security, Penetration Testing, Security Audits, Cloud Security, Product Security, Cryptocurrency Custody, Multi Party Computation (MPC), AML, KYC AML KYT | | LinkedIn | https://linkedin.com/in/lucianociattaglia | ## About ```text At Wio Bank PJSC, I’m building institutional custody infrastructure from the ground up, implementing self-custody MPC alongside AML integrations for KYT and the Travel Rule. At Hacken, I led a team of 20+ developers, DevOps, and QA engineers delivering core products and AI projects. I built agent frameworks and custom MCPs, and optimized LLM performance through RAG and fine-tuning. As Director of Security Services at Hacken, I managed a global team of 50+ security engineers and oversaw security audits for web2 and web3 clients. I also advised on offensive security and compliance frameworks including DORA/MiCA, SOC2, ISO 27001, VARA, and ADGM. Earlier, I led application and blockchain security work at Binance, Ripio, and Mercado Libre, covering secure development, penetration testing, threat modeling, and vulnerability management. I hold a Bachelor's degree in Computer Science and certifications including OSCP, CCSSA, CBP, and CEP. ``` ## Experience ### Information Security Officer (current) Wio Bank PJSC. Sep 2025 - Present ```text Building institutional custody infrastructure from the ground up, implementing a self-custody MPC at scale with several AML integrations (KYT and Travel Rule). Regulated under CMA and CBUAE. ``` Skills: MPC, AML, KYT, Travel-Rule, Institutional-Custody, Blockchain-Security ### VP of Special Operations & AI [Hacken](https://himalayas.app/companies/hacken). Jan 2025 - Sep 2025 ```text Led 20+ developers, DevOps, and QA engineers to deliver core products and multiple AI projects. Directly managed AI initiatives by building agent frameworks, custom MCPs, and optimizing LLM performance through RAG and fine-tuning. ``` Skills: AI, LLM, RAG, Fine-Tuning, LLM-AI-Agent-Frameworks, MCP, DevOps, Leadership ### Director of Security Services [Hacken](https://himalayas.app/companies/hacken). Jul 2023 - Jan 2025 ```text Managed a global team of 50+ security engineers specializing in smart contract and blockchain security, dApp audits, pentests, and compliance audits. Oversaw 560+ security audits with 4k+ findings, including 200+ critical issues, for 400+ web2 and web3 clients. ``` Skills: Smart-Contract-Security, Blockchain-Security, DApp-Evaluation, Penetration-Testing, Compliance, DORA, MiCA, SOC2, ISO-27001, VARA, ADGM ### Head of Blockchain Security Research [Hacken](https://himalayas.app/companies/hacken). Dec 2022 - Jul 2023 ```text Led security audits for Layer 1 and Layer 2 blockchain protocols, ensuring integrity from consensus mechanisms to block generation. Identified 120+ vulnerabilities, managed remediation processes, and provided post-audit monitoring for top-tier clients. ``` Skills: Blockchain-Security, Layer-1s, Layer-2, Consensus-Mechanisms, Vulnerability-Management, Audit ### Secure Development Lifecycle (SDL) Technical Lead [Binance](https://himalayas.app/companies/binance). Mar 2022 - Dec 2022 ```text Led application security at Binance Global safeguarding web, mobile, and desktop platforms through code audits, white box penetration testing, and CI/CD DevSecOps integration. Developed risk management strategies to mitigate client-facing vulnerabilities while leading an AppSec team supporting 1,000+ developers across 70+ countries. ``` Skills: Application-Security, Code-Auditing, White-Box-Testing, DevSecOps, CI-CD, Risk-Management ### Application Security Lead [Ripio](https://himalayas.app/companies/ripio). Jul 2021 - Mar 2022 ```text Developed security policies, disaster recovery, and business continuity plans to ensure resilience. Implemented Secure SDLC across 150+ projects aligned with BSIMM 11 and OWASP SAMM, managed the Bug Bounty program, and led vulnerability assessments ensuring compliance with NIST CSF, ISO 27001, and SOC2 Type 2. ``` Skills: Security-Policies, Disaster-Recovery, Business-Continuity, Secure-SDLC, BSIMM, OWASP-SAMM, Bug-Bounty, Penetration-Testing, Vulnerability-Assessment, NIST-CSF, ISO-27001, SOC2, Threat-Modeling ### Sr. Cyber Security Engineer [Mercado Libre](https://himalayas.app/companies/mercado-libre). Jan 2020 - Jul 2021 ```text Performed penetration tests and delivered security awareness training for 8,000+ developers in multiple programming languages. Conducted deep threat modeling to identify risks from the design phase, enhanced vulnerability management, and performed black/white box testing to uncover exploitable flaws. ``` Skills: Penetration-Testing, Security-Awareness, Threat-Modeling, Vulnerability-Management, Black-Box-Testing, White-Box-Testing, Bug-Bounty ## Education ### CryptoCurrency Certification Consortium (C4) Certified Ethereum Professional (CEP), Cryptocurrency. 2023 - 2023 ```text Certified as an Ethereum Professional (CEP) in January 2023. ``` ### CryptoCurrency Certification Consortium (C4) Certified Bitcoin Professional (CBP), Cryptocurrency. 2023 - 2023 ```text Certified as a Bitcoin Professional (CBP) in January 2023. ``` ### Certiprof Lead Cybersecurity Professional Certificate (LCSPC), Cybersecurity. 2022 - 2022 ```text Earned the Lead Cybersecurity Professional Certificate (LCSPC) in January 2022. ``` ### OffSec OSCP - Offensive Security Certified Professional, Offensive Security. 2021 - 2021 ```text Earned the OSCP - Offensive Security Certified Professional in July 2021. ``` ### Blockchain Council Certified Blockchain Security Professional (CBSP), Blockchain Security. 2021 - 2021 ```text Earned the Certified Blockchain Security Professional (CBSP) in April 2021. ``` ### EC-Council Certified Ethical Hacker (CEH), Ethical Hacking. 2021 - 2021 ```text Earned the Certified Ethical Hacker (CEH) in February 2021. ``` ### DefensityOne Certified Network Security Specialist (CNSS), Network Security. 2020 - 2020 ```text Earned the Certified Network Security Specialist (CNSS) in August 2020. ``` ### Villa María University Bachelor's degree, Computer Science. 2013 - 2017 ```text Bachelor's degree in Computer Science from Villa María University, completed in 2017. ``` ## Tech stack - Stride - Model Context Protocol (MCP) - Retrieval-Augmented Generation (RAG) To contact Luciano, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Zain Yaseen](https://himalayas.app/@zainyaseen): Application Security Engineer DevOps, FinTech - [Afeef Veetil](https://himalayas.app/@afeefveetil): Head of Information Security, Invest Bank - [PRINCE AFSAR](https://himalayas.app/@princeafsar): Information Security Consultant, SecureTech LLC - [Shafiq Ahmed](https://himalayas.app/@shafiqahmed2): Manager Cybersecurity Risk, Abu Dhabi Commercial Bank - [Rakesh S](https://himalayas.app/@rakeshs1): IT Infrastructure Engineer, Etisalat NFM - [Guy Martin](https://himalayas.app/@guymartin): VP Information Security, ConnectWise - [Madan Devaiah](https://himalayas.app/@madandevaiah): Manager, SOC MXDR, SISA Infosec - [GOVIND GOPAKUMAR](https://himalayas.app/@govindgopakumar): Assistant Manager, Bajaj Auto Ltd. - [Utkarsh Singh](https://himalayas.app/@utkarshsingh16): Senior Security Consultant, Dell Technologies - [mohamed nabil](https://himalayas.app/@mohamednabil2): Cybersecurity Technical Tutor, Udacity