Michele Toccagni

Cyber Security Operation Lead

ING Bank Italy

• Penetration Testing: Led penetration testing initiatives, simulating real-world attacks to identify and remediate vulnerabilities.
• Risk Assessment & Vulnerability Management: Conducted risk assessments and vulnerability management, ensuring timely patching of security gaps.
• Threat Intelligence: Oversaw threat intelligence operations, proactively identifying and mitigating emerging cyber threats.
• Security Policies & Incident Response: Developed and enforced security policies, procedures, and incident response plans to strengthen organizational security posture.
• Application Security: Implemented SAST (Static Application Security Testing) and SCA (Software Composition Analysis) processes, integrating security best practices into the software development lifecycle (SDLC).
• Data Loss Prevention (DLP): Designed and implemented DLP strategies to protect sensitive data, ensuring compliance with industry regulations and minimizing data breaches.
• Budget & Vendor Management: Managed security budgets and vendor relationships, optimizing investment in security technologies and services.

Security Associate Manager - Penetration Tester

Accenture Italy

• Involved in the security analysis of infrastructures, with focus on Web, Network, Mobile and Thick Client Penetration Test.
• Developed a tool to generate automatically the reports of Penetration Tests (like Serpico). This tool is written in Python-Flask, create both Word and Excel reports and it's used by the whole team.
• Team management, both in managing activities and in relations with clients.
• Coordinate and direct all phases of product testing while managing and leading project teams.
• OSINT and Threat Intelligence activities.

Security Audit

Argo Software

Collaboration with Alpha Institute of Geopolitics and Intelligence

Malware Analisys for the Ransomware Report 2016