Open to opportunities

salvo gulizia

@salvogulizia

Message

I uncover browser and binary exploitation vulnerabilities and build developer automation tooling.

Italy

Message

I found V8 type-confusion vulnerabilities in Google Chrome, turning missing write barriers and incorrect map checks into JavaScript-heap arbitrary read/write primitives.

My research includes CVE-2026-15776 in RegExp @@matchAll and CVE-2026-85046 in Maglev’s Array.prototype.sort optimization, both used to capture Google v8CTF flags.

I represent Italy on the ECSC National Team, specializing in binary exploitation. I’ve also taught V8 engine exploitation and glibc heap internals to fellow team members.

At Iveco Group, I maintain Azure DevOps CI/CD pipelines and Git workflows while building automation and internal tooling for developer workflows and testing.

Experience

Work history, roles, and key accomplishments

Current

DevOps Engineer

Current

Iveco Group

Jan 2026 - Present (8 months)

Maintaining CI/CD pipelines and version control workflows using Azure DevOps and Git, while developing automation scripts and internal tooling for developer workflows and testing.

Azure DevOps Git CI CD Automation Scripting

Education

Degrees, certifications, and relevant coursework

University of Genoa

CyberChallenge.IT, Cybersecurity

2023 - 2026

Activities and societies: Tutor and Organizer

Participated in CyberChallenge.IT, reaching the National Finals in 2023 and later serving as Tutor and Organizer for three editions, teaching binary exploitation, reverse engineering, x86 assembly, GDB, and IDA.

University of Genoa

Bachelor's degree, Computer Science

2023 - 2024

Activities and societies: SWERC (ICPC) team member

Represented the University of Genoa in two consecutive SWERC (ICPC regional) editions in Paris (2023) and Pisa (2024), working in a 3-person team on complex algorithmic challenges in C++ and Python.