Tommaso Casoni

WORK HISTORY

EDUCATION

ABOUT TOMMASO CASONI

As an Ethical Hacker / Pentester at Deloitte, I have led over 20 security assessments, penetration tests, and red teaming exercises, identifying and mitigating critical vulnerabilities to enhance client security. I specialize in using advanced tools like Burp Suite, Tenable Nessus, Ping Castle, and Wireshark.Currently, I am pursuing a Master’s degree in Cybersecurity at Politecnico di Milano and hold an MSc in Electronic Engineering \"Smart and Secure Communication Networks\" summa cum laude from UNIVPM. During my internship at Universitat Politècnica de Catalunya, I optimized quantum-resistant cryptosystem algorithms by pipelining multiplications through the use of Intel\'s AVX2 intrinsic instructions, achieving a performance improvement of approximately 8 times for finite field multiplication and 4 times for polynomial multiplication over an extended finite field.With over 2 years of professional experience in vulnerability assessment and penetration testing, I have a deep understanding of the end-to-end Vulnerability Management process and related industry standards, such as CVE, CPE, and CVSS. My expertise extends to the use of security scanning systems like Rapid 7 and Qualys, and I have strong skills in interpreting and analyzing the results from these tools.I am proficient in OWASP and OSSTMM assessment methodologies and have conducted numerous technical assessments and audits of networks, operating systems, databases, and applications. Additionally, I have extensive knowledge of the application development life cycle, secure development methodologies, and cloud services and architectures.I hold some a-tier cybersecurity certifications including eCPPT, eWPT, eJPT, and ICCA. Beyond formal education and certification, I have completed 35+ retired machines on Hack The Box (HTB) and rank in the top 5% on TryHackMe, demonstrating my practical skills and commitment to continuous learning.Fluent in English, Spanish, Italian, and Catalan, I excel in creating comprehensive security test reports and deliverables, developing guidelines for secure development, and defining cyber security solutions. My strong communication skills and ability to interact constructively with various stakeholders ensure effective collaboration across departments and with external suppliers.I am dedicated to staying ahead in the rapidly evolving field of cybersecurity. Let\'s connect to discuss cybersecurity trends and explore collaborative opportunities.