Alessandro Zarrilli
Lead Ruby Security Engineer, Clinical Trials @Novartis
Signup · Get unlimited contacts
WORK HISTORY
Lead Ruby Security Engineer, Clinical Trials @Novartis
I led a development team focused on security. Our task was to address and rectify code-level vulnerabilities in the Novartis Interactive Response Technology (NIRT), an essential GxP application developed in-house using Ruby on Rails. This system, running 24/7/365 across 64 countries, is responsible for managing interactions among patients, doctors, and depots during clinical trials.\\\\n\\\\nThe vulnerabilities were initially identified through penetration testing. We collaborated with various IT and business teams to align security enhancements with the company\'s objectives without disrupting production.\\\\n\\\\nKey tasks and accomplishments included:\\\\n• Extending multi-factor authentication for all user classes within the application.\\\\n• Addressing vulnerabilities revealed during penetration testing.\\\\n• Upgrading packages on the application server to enhance performance and security.\\\\n• Migrating the code repository from GitHub to an internal Bitbucket repository, a task that involved the design and setup of a new Linux-based development environment, a new development toolchain, establishing procedures, and drafting comprehensive documentation.\\\\n• Creating a PowerShell script to safely perform housekeeping of the data exchanged between SAP and a GxP system.\\\\n\\\\nPart of the role involved acting as a central point of reference for security-related inquiries about the NIRT application from IT and business stakeholders. This required a broad understanding of security protocols, cryptographic procedures, and authentication and authorization techniques. Moreover, staying current with the latest security threats and vulnerabilities, and coordinating with teams to address these issues promptly, was an essential aspect of the role.\\\\n \\\\n\\\\n \\\\n \\\\n\\\\n \\\\n
EDUCATION
Università degli Studi di Firenze
Information Technology
SKILLS
ABOUT ALESSANDRO ZARRILLI
I\'ve been working as an IT freelance since always using open source tools as…
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.