Security High School

MASSIMILIANO MINNITI

Address: Rohansk N b?e?, *57/7 Tel (Mob): +420-*********

Prague (Czech Republic) E-mail:

acf853@r.postjobfree.com

Nationality: Italian

Linkedin: http://it.linkedin.com/pub/massimiliano-minniti/5/54a/30a

OBJECTIVE

Seeking Information Security opportunities in order to improve my technical

skills, giving to my professional career a specialized path.

SUMMARY

Information security analyst with background in event monitoring and

incident handling for large networks.

I have been worked in IT environments since 2001 and been covered several

sectors (Telco, Banking, Defense, Energy).

I have been dedicated last years to Security Information, I'm aware of the

concepts associated with firewall, host and network based intrusion

detection/prevention systems, SIEM, switch and router configuration and

management.

EXPERIENCE

April 2013 - Accenture Services s.r.o Czech Republic - Senior

Security Analyst Current at Infrastructure Security Incident

Response Team (ISIRT)

Provide inside information security for Accenture's global network:

EMEA CIRT Senior Security Analyst

Global Tier 3 support for incident analysis, investigation and response

Malware analysis (Static\Behavioral Analysis)

Mandiant Incident Response: Administration (MIR, MSO, Stacker, Sweep, IOCs)

Event log analysis (Proxy, Firewall, DHCP, WiFi, HTTP)

SIEM Threat Intelligence

SIEM security monitoring and incident response processes

R&D on new security threats, IDS signatures implementation and tools

development

January 2012 - Exprivia c/o Acquirente Unico, Italy - Security Analyst

March 2013

Responsible for plan Information Security Governance:

Collecting Customer's Security Requirements and writing

SecOps (Security Operations: Identity and Access

Management, PKI Management) with my team;

Design of Audit and Incident Handling Management: Writing framework to

design policies, plans, and procedures related to incident response;

Planning of Vulnerability Assessment and Penetration Test Audit: Writing

Security Audit Program baseline (Inside\Outside Environment, Black\White

Box Test, Tools, Scenarios, others);

Security Operation Center (Incident Response, Vulnerability Scanning): I'm

responsible for monitor, assess, defend and audit (Nessus, Metasploit,

other) Customer's Infrastructure.

February 2009 - Exprivia c/o Selex Integration ltd, Italy - Senior System

Administrator

December 2011

Responsible for manage the TestBed site for EUCCIS Project (European Union

Command and Control Information System)'s Acceptance Test.

Management of installation and delivery EUCCIS software release;

Mission focused on a training course based on EUCCIS project for EU

Monitoring Mission (EUMM) Team in Tbilisi, Georgia;

Support the Vulnerability Scanning Phase: Application of Vulnerability

Remediation Program, fixing environment's vulnerabilities (update the

application\server, close no-critical application\server services, other).

January 2008 - Exprivia, Italy - System Administrator

January 2009 Worked in team to conduct and manage the Network and

Systems Infrastructure.

February 2007 - Exprivia c/o Cr dit Agricole Asset Management, Italy

- System December 2007 Administrator

Responsible for delivery of the Network Infrastructure Services.

November 2006 - Exprivia c/o GRTN, Italy - System Administrator

January 2007 Worked in team to conduct and manage the Network and

Systems Infrastructure.

February 2006 - Exprivia c/o EDA Enterprise, Italy - System Administrator

October 2006 Responsible for install and troubleshooting Network

and Asset Management Solution.

May 2005 - Exprivia c/o TIM, Italy - System Administrator

January 2006 Responsible for the Software Delivery and Asset

Management Infrastructure.

April 2004 - Abaco Software Consulting, Italy - System

Administrator

April 2005 Worked in team to conduct and manage the Network and

Systems Infrastructure.

October 2001 - Abaco Software Consulting c/o H3G (Hutchison Whampoa

Group), March 2004 Italy - System Tester

Responsible for conduct the phase of System Test of H3G

Telco Services on Intec Intermediate System:

Design Test Cases on test book system, Test Director;

Planning the System Tests on the new services delivered on Intec System;

Installation of the HP's new release of code on HP-UX test server.

QUALIFICATIONS

1997 - 2001 [2:1] 104/110 Bachelor's Degree in Computer Science, University of

Bari

- Italy

Subjects studied included: Algorithms and Data Structures, Computer Architectures,

Computer Networks, Software Engineering.

1988 - 1993 High School Graduate in Maths - Massafra, Italy

High School covering subjects such as Italian language and literature, mathematics,

physics, chemistry, biology, history, philosophy, Latin language and culture.

TRANSFERABLE SKILLS

Skills: Incident Response, Malware Analysis, Reverse-Engineering

Malware, Event Log Analysis, Threat Intelligence, Information Security,

Risk Analysis, Vulnerability Assessment, Penetration Testing, OSSTMM;

Mandiant Incident Response, MSO, Stacker, Redline, FireEye MAS,

ArcSight 6.0, McAfee IDS v.6\7, Symantec Endpoint Protection, Sawmill,

Backtrack, Nessus, Nmap, Metasploit;

Windows XP\7, Windows Server 200x, Ubuntu, VirtualBox, Vmware;

C\C++, Assembly x86, Shell Scripting, IDA Pro, WinDbg, OllyDbg.

Certifications: CISA - April 2011, L.A. ISO27001:2005 - June 2012,

ITIL Foundation v2 - 2006, ITIL v3 Bridge - December

2007, OSSTMM Professional Security Tester - July 2007,

Netasq Administrator - 2005, CCNA 640-801 - 2004, RealSecure

SiteProtector - 2004, Internet Scanner - 2004.

Security Courses: FOR610: Reverse-Engineering Malware: Malware

Analysis Tools and Techniques - Lenny Zeltser

- Sep 29 - Sat, Oct 4, 2014

Mandiant Incident Response - March 2014

Essentials of Information Security - Security+ -

May 2009

Hands on Hacking Unlimited - November 2006

Information System's Audit and Security Governance -

March 2005

Languages: Italian - Mother tongue, English - Upper Intermediate.

English Courses: Progress Language Institute - Prague, since June

2013 until September 2014, Berlitz - Web, August

2012\October - Berlitz Cyber Teacher - CEF B1.2, Berlitz -

Rome, February, 2012\May - Course of English, 3nd Level - CEF A2.2, Berlitz

- Rome, October 2011\January 2012 - Course of English,

2nd Level - CEF, A2.1, Arena School of English -

Dublin, August 2011 - Intermediate Course, Duration: 3 Weeks,

Dublin.

Memberships: ISACA, (ISC) Italian Chapter, CLUSIT.

OTHER INFORMATION

Ready to relocate in 2 months.

Contact this candidate