Andrea Pasin

Experience

• 

  Skytekne Srls

  Oct 2018 - Apr 2020

  Network & System Specialist

  - Vulnerability Assessment & GDPR Compliance Auditing (OpenVAS, Nessus)- Design, Implementation and Management of Network Security Solutions (Firewalls)- Windows & Linux Servers Installation, Management and Administration (Proxy Servers, Domain Controllers, DNS, DHCP, Reverse Proxy)- Network Monitoring & Log Analysis (WatchGuard Dimension)- Disaster Recovery & Backup Management- Data Recovery (Caine OS, Autopsy, Photorec)- Help Desk

• 

  Netx64 Srl

  Apr 2020 - Jan 2021

  System Specialist

  - Vulnerability Assessment (OpenVAS, Swascan, Nessus)- Penetration Testing (Social Engineering, Phishing Simulation, Assume Breach/Malware Infection)- R&D (scripting, mainly through Python, for internal cybersec tools or malware development)- OSINT Research (Threat Intelligence Analysis)- System Engineering (Design, Installation and Configuration of VMware, Windows & Linux Servers infrastructures)- Network Engineering (Installation and Configuration of Firewalls, Switches and Access Points Solutions)- Monitoring & Data Analysis (Open-Source Customized Monitoring Solutions Design and Deployment) Show less

• 

  Lan & Wan Solutions Srl

  Jan 2021 - Jan 2022

  Cyber Security Specialist

  - Penetration Testing (Web Application - Infrastructure)- Digital Forensic Analysis (Conduction of post-breach investigations to determine the root cause of compromisation by preserving valid proofs to present in case of legal action)- Vulnerability Assessment (Network and Web Application Scan)- R&D (scripting for Cybersec & PenTesting Tools)- Network Monitoring & Log Analysis (SOC events and traffic analysis L1-L2)- Antimalware Suite Management (Antimalware + EDR deploy, configuration and management)- Firewall Policy Review (Routing policy review, Security Features configuration analysis and current firewall security posture evaluation with suggested improvements)- Cybersecurity Consultancy Show less

• 

  Hack The Box

  Apr 2021 - Mar 2022

  Pro Hacker

  Nickname: xenoM0rph97 - ID: #290005

• 

  NF_Security

  Jun 2021 - Dec 2023

  - Red Team Lead- Red Team Engineering- Software EngineeringMain focus of the conducted team are developing zero-day malware and offensive security researching. - Threat Intelligence (zero-day malware hunt and analysis)- Malware Analysis (Static Analysis: strings, hashes, memory dump forensics, dll imports... Dynamic Analysis: Process Hooking, Live Memory Analysis, Behavioral Analysis...)- Incident Response (CSIRT member)- Software Engineering (zero-day malware development)

  • Head of Red Team & Developer

    Dec 2021 - Dec 2023

  • Cyber Defense Incident Responder/Cyber Security Analyst

    Jun 2021 - Dec 2021
• 

  AlmavivA

  Jan 2022 - May 2022

  Ethical Hacker | Penetration Tester

  - Web Application Penetration Testing- Infrastructure Penetration Testing- Vulnerability Assessment- DevSecOps- Code ReviewMainly working with italian government, military and state-owned companies.

• 

  Kirey Group

  May 2022 - Nov 2022

  Penetration Tester

  - Web Application Penetration Testing- Infrastructure Penetration Testing- Mobile Application Penetration Testing (Android/iOS)- Vulnerability Assessment- Network Segmentation CheckMainly working in the banking, financial and insurance field.

• 

  Amazon Web Services (AWS)

  Nov 2022 - now

  Penetration Testing Engineer

  - Penetration Testing- R&D (Automation & Tooling development)- Code Review- Security Verification and Validation