Alessandro G.

• Penetration testing on web software used in a railway industrial setting

• Penetration testing of an access authentication software for the company's extranet

• Writing a report summarizing all techniques and methodology of a pentest

• State of the art and prototyping of a monitoring and anomaly detection solution for the computer network, in accordance with ISO 27001

• Setting up an industrial pentest environment on a SCADA system

• Risk analysis with EBIOS RM

• Creation of a hardening guide for a Windows 11 master image

• Development of a Python project

• Creation of a template for a Cloud questionnaire based on ISO 27001

• Creation of a clear security charter adapted to the sector, specifying the rules to follow to ensure the security of data and systems.

• Design of a phishing awareness program for employees, with training and regular tests to ensure the team was well prepared to recognize and respond to phishing attempts.

• Recommendation and implementation of secure communication methods to prevent sensitive data leaks, particularly in commercial exchanges and customer transactions.

• Definition of secure procedures for sales processes.

• Monitoring and continuous improvement of attack simulations, security patches, security policies, and employee training.