I'm Samuele Padula.

• Vulnerability Assessment
• Perform Web Application and Infrastructure Penetration Tests in a black/gray-box approach
• Golden Image Security Assessment
• Active Directory security posture testing
• Contribution to the development and improvement of security testing methodologies, tools and processes in client’s companies.

• Incident analysis using SIEMs such as IBM QRadar, Azure Sentinel, Crowdstrike and Splunk
• Analysis of phishing attacks via the Email protection solution of Proofpoint Email

• Azure Network Security project for a major European player in the steel industry: design of Azure Networking, refactoring of Active Directory environment, configuration of Azure AD Connect
• Azure Sentinel and Microsoft Defender for Cloud, Apps, Identities and IoT
• ADDS/AAD administration
• Automatic analysis of file server share ACLs using Powershell
• Security assessments of Azure Tenants/Subscriptions
• Migration to Cloud of on-premises infrastructures
• Design, management and maintenance of cloud and on-premises infrastructure for a leading European energy company
• Azure IaaS deployment
• Azure IoT management and deployment with ARM templates/Powershell
• MSSQL Server
• Cost and resource management
• Azure Kubernetes Service and migration from RedHat OpenShift (AKS over HCI), Azure Container Registry, RabbitMQ

• Operator of a Network Operation Center to support public and private companies
• Maintenance and management of routers, switches, access points (Cisco, Aruba, HP, PaloAlto, Fortinet)
• Network analysis and backup
• Documentation and reporting
• Configuration and maintenance of Icinga, Neteye and NeDi monitoring tools for the new NOC Platform
• Data integration and analysis via InfluxDB and Grafana
• Unix/Linux Systems administration (CentOS, RedHat Enterprise)

• IT operations and support
• Network mainteinance and Hardware and software support

CFU achieved: 60
Thesis: DEMIoT, a secure microservices IoT environment
Modules details:

• Python Course
• Data mining
• Networking
• Web technology
• Applied cryptography
• Network Securiy and Ethical hacking
• Operating Systems Security
• Digital Forensics
• Cyber Intelligence
• Complex network analysis
• Regulations on general data protection,GDPR and cybersecurity
• Java Fundamentals Course
• LAB Secure System Configuration
• LAB on DNS,DNSSEC
• LAB on Secure Tool
• Mobile and Cloud security

CFU achieved: 30/120
Exams obtained: 3/12
Exams details:

1. Data and system security:
• elements of computer security (threats, attacks, security requirements and defense strategies)
• elements of authentication and access control
• security in databases and datacenter
• attacks (malware, buffer overflow, denial of service,...)
• operative systems security (virtualization, case studies Linux, Windows, Android)
• security in mobile and cyber-physical systems
• aspects of management of computer security
2. Language-based technology for security:
• Memory corruption flaws: buffer overflow, stack overflow, code injection
• Language-based Security: Java stack inspection and access control, certified compilation, typed assembler languace, code obfuscation
• Language-based Security Lab
• Information flow security: integrity, confidentiality, hidden channels. Type-based information flow
• Information flow security Lab: JSflow
• Security in Web Application
• Formal methods for Security: type systems and static analysis
• Formal Method for security Lab
3. Systems and Languages for Informatics:
   • Introduction to principles of programming languages
   • Introduction to problem solving
   • Introduction to program complexity
   • Constructs, functions, data structures and pointers in C
   • Posix library and PThread
   • Computer Organization. Interrupt Mechanism. Assembly Language. Operating System Organization. Processes and Process Management. Memory Management, Virtual Memory. I/O Management. File System. Databases. DBMS. SQL Language.
   • Point-to Point links. PPP Protocol. Local Area Networks (LANs). Ethernet. Switched Networks. Virtual LANs. Internet. IP Protocol, IP Addresses, Datagram Forwarding. Transport Protocols (UDP, TCP). Wireless Networks and Mobile Computing.
   • Socket-based Interface. Client/Server and P2P Applications

CCNA 200- 301 Talent certification path offered by Lantech Longwave s.p.a

CFU achieved: 120
Evaluation: 110/110
Thesis: Monitoring of an IT infrastructure by means of Open Source technologies: study and simulation