Fabrizio Moro

• Deliver Success Program-style security posture assessments (Defender for Cloud / Secure Score / Microsoft Security Benchmark) across multiple customers, producing executive-ready deliverables and prioritized remediation roadmaps aligned to risk, effort and dependencies.

• Drive delivery governance across engagements (kickoff → milestones → deliverables → closeout), ensuring adherence to Microsoft documentation standards and consistent technical quality.

• Build and maintain operational reporting on assessment progress and outcomes (recommendations status, risk themes, remediation backlog) using Power BI dashboards, enabling leadership visibility and customer alignment.

• o Design, implement and manage cloud-native security controls - including IAM

policies, encryption mechanisms, key-management workflows and centralized logging to deliver end-to-end protection and auditability across all cloud

workloads.

• o Produce clear, high-impact reports and coached 5+ junior analysts, fostering a

culture of continuous security excellence.

• o Develop and maintain comprehensive documentation of cloud-security

architectures, operational runbooks and configuration baselines, enabling

repeatable and auditable deployments.

• Perform comprehensive Azure-cloud security assessments across IAM, network

topology and landing-zone architecture, quantifying risk and delivering a remediation roadmap that links effort to security impact.

• Optimize Azure Sentinel coverage by expanding telemetry from 30 to 110 log

sources and engineered 20 + bespoke KQL analytics rules, Workbooks and

automated Logic Apps, closing critical detection gaps and cutting high-severity

false positives by ≈45 %

• Enhance Microsoft Defender for Cloud and Defender for Cloud Apps: tune alerting thresholds, onboard additional asset sources, build bespoke Workbooks, enforce governance policies and create high-fidelity correlation rules via KQL and

Advanced Hunting.

• Design secure Azure landing zones using a hub-and-spoke architecture that

integrates networking controls, centralized logging & monitoring, and role-based

access management.

• Work closely with customers, either from a technical or non-technical standpoint, to deliver a solution that fulfils or exceeds their requirements.