Salvatore A.

Security engineer and systems developer. I take systems apart to find out how they fail, then rebuild them so they don't. I work with teams that need one person who can read a binary, audit a codebase, harden a Linux fleet and ship the fix — instead of three separate contractors. 25+ years across security research, reverse engineering and production infrastructure, delivered end to end: assessment, remediation, and the pipeline that keeps the problem from coming back. WHAT I DO • Application & product security Threat modelling (STRIDE), secure code review, OWASP Top 10 and ASVS, SAST/DAST/SCA integration, mobile app security (OWASP MASVS/MASTG), and security of LLM-based and AI-driven applications (prompt injection, tool-call abuse, data exfiltration). • Reverse engineering & malware analysis Static and dynamic analysis with Ghidra, IDA Pro, radare2 and Frida. ARM and x86-64 assembly, Android and iOS binaries, obfuscation and anti-tamper, firmware and proprietary protocol reversing. • Cloud & infrastructure security AWS, Azure and GCP posture review, IAM least privilege, network segmentation and zero-trust design, Kubernetes and container hardening (CIS Benchmarks, Trivy, Falco, admission policies), secrets management with Vault and SOPS, software supply-chain security (SBOM, sigstore, dependency pinning). • DevSecOps & platform engineering Terraform/OpenTofu, Ansible, Chef, Puppet, Docker, Kubernetes, Helm, ArgoCD, GitHub Actions and GitLab CI, observability with Prometheus, Grafana and OpenTelemetry. Security gates designed so developers don't route around them. • Linux and *BSD engineering Debian, Ubuntu, RHEL, FreeBSD and OpenBSD: hardening, kernel and eBPF-level troubleshooting, recovering servers that no longer boot, performance tuning and migrations. • Backend & automation development Python, Go, Rust, TypeScript/Node.js, Java/Kotlin, C/C++ and Bash. REST and GraphQL APIs, event-driven integration (Kafka, RabbitMQ, MQTT), PostgreSQL/MySQL/Redis/MongoDB, and integration with telephony, CRM and ERP platforms. • Compliance with engineering behind it GDPR, NIS2, ISO/IEC 27001, the EU Cyber Resilience Act and DORA, translated into controls, architecture and evidence rather than a policy PDF. HOW I WORK Clear scope agreed before anything starts. Findings written so both your engineers and your management can act on them. Severity ranked by real exploitability, not by what a scanner says. And a fix I can implement, not just recommend. I stay reachable for the whole engagement, and I tell you plainly when something falls outside my expertise. Native Italian, professional English. Available for short assessments and for long-term retainers.