Luca Feudi

Information Technology Security Engineer @UniCredit

Verona, IT

As a Cybersecurity Engineer tasked with enhancing the security of our DevSecOps initiatives, overseeing vendors\'efforts to mitigate Kubernetes (k8s) security issues, and deploy Cloud Native Application Protection Platforms(CNAPP) and Cloud Security Posture Management (CSPM) solutions for Unicredit, my primary goal is to fortify ourdigital infrastructure against evolving cyber threats while ensuring compliance with regulatory standards.In enhancing our DevSecOps practices, I actively collaborate with our development and operations teams to integraterobust security controls seamlessly into our CI/CD pipelines. This involves conducting thorough threat modeling,implementing automated security testing, and fostering a security-first mindset across the organization.When it comes to overseeing vendor work related to Kubernetes security, I take a hands-on approach. I evaluatevendor solutions, ensuring they align with our bank\'s specific security requirements and effectively address potentialvulnerabilities in our Kubernetes deployments. By maintaining close relationships with our vendors, I stay informedabout the latest security developments and ensure that our infrastructure remains resilient in the face of emergingthreats.Deploying CNAPP and CSPM solutions is another crucial aspect of my role. I lead the implementation and configurationof these cutting-edge security technologies, leveraging their capabilities to protect our cloud-native applications andinfrastructure. By continuously monitoring our cloud environment and enforcing security policies, I mitigate risks andsafeguard our assets against unauthorized access, data breaches, and other security incidents.Throughout these endeavors, I remain committed to staying abreast of industry best practices, regulatory mandates,and emerging cyber threats.

ITIS Marconi

Perito Informatico, Ret