I'm Samuele Padula.

• Conducted black-box and gray-box Web Application & Infrastructure Penetration Testing (WAPT & VAPT) across client environments, identifying vulnerabilities using tools such as Burp Suite, Nmap, and Kali Linux suite
• Executed Assumed Breach, Ransomware simulation, and Insider Threat scenarios to evaluate corporate resilience, defensive postures, and detection mechanisms
• Performed Active Directory security posture testing, analyzing domain misconfigurations, privilege escalation vectors, and lateral movement paths using BloodHound and specific tools
• Carried out Golden Image Security Assessments to ensure baseline hardening of OS and system images prior to enterprise deployment
• Developed and refined offensive security testing methodologies, custom automation scripts (Bash / PowerShell / Python), and internal reporting processes for enterprise clients

• Performed threat monitoring, log analysis, and incident triage across enterprise environments using SIEM solutions including Splunk, IBM QRadar, and Microsoft Azure Sentinel.
• Investigated endpoint threats, malware behavior, and suspicious activities using CrowdStrike Falcon EDR.
• Analyzed and mitigated email-borne threats, phishing campaigns, and Business Email Compromise (BEC) attempts utilizing Proofpoint Email Protection.
• Assisted in refining detection rules, correlation queries, and incident response playbooks for SOC operations.

• Designed and configured Azure Network Security architectures and refactored Active Directory (ADDS / Azure AD / Entra ID) environments with Azure AD Connect for major industrial clients
• Managed and tuned Microsoft Defender for Cloud, Apps, Identities, and IoT alongside Azure Sentinel for continuous threat monitoring and cloud governance.
• Executed comprehensive cloud security assessments on Azure Tenants and Subscriptions, enforcing security baselines and ARM Template deployments
• Managed Azure Kubernetes Service (AKS), Azure Container Registry (ACR), Docker, and migrations from RedHat OpenShift and AKS on Azure Stack HCI
• Configured and maintained message broker infrastructure including RabbitMQ, VMware Tanzu RabbitMQ for Kubernetes, Shovel plugin, and Azure IoT services (Event Hub, Service Bus, IoT Hub, IoT Edge Runtime)
• Managed MSSQL Server databases and provided advanced technical support for Microsoft Service Requests

• Operated within a Network Operation Center (NOC), managing, configuring, and maintaining enterprise routers, switches, and wireless access points from Cisco, Aruba, and HP
• Performed firewall troubleshooting and policy configuration on Palo Alto Networks and Fortinet FortiGate appliances
• Monitored network performance and uptime using Icinga, Neteye, and NeDi, integrating metrics with InfluxDB and Grafana dashboards.
• Administered Unix/Linux Systems (CentOS, RedHat Enterprise Linux - RHEL) and managed automated network backups and technical documentation.

• IT operations and support
• Network mainteinance and Hardware and software support

CFU achieved: 60
Thesis: DEMIoT, a secure microservices IoT environment
Modules details:

• Python Course
• Data mining
• Networking
• Web technology
• Applied cryptography
• Network Securiy and Ethical hacking
• Operating Systems Security
• Digital Forensics
• Cyber Intelligence
• Complex network analysis
• Regulations on general data protection,GDPR and cybersecurity
• Java Fundamentals Course
• LAB Secure System Configuration
• LAB on DNS,DNSSEC
• LAB on Secure Tool
• Mobile and Cloud security

CCNA 200- 301 Talent certification path offered by Lantech Longwave s.p.a

CFU achieved: 120
Evaluation: 110/110
Thesis: Monitoring of an IT infrastructure by means of Open Source technologies: study and simulation