Description

Network Security Engineer with 5+ years of hands-on experience in enterprise cybersecurity, based in Zürich.

I have worked for major organisations including SIX Group — the Swiss financial market infrastructure — and SKY Italy, managing complex security environments across Palo Alto, Fortinet, Cisco ASA, and Checkpoint. I am experienced in SIEM threat detection with Splunk, privileged access management with CyberArk, VPN architecture (IPsec/IKEv1-v2), and firewall policy management at scale using the Tufin Suite.

I have led SWIFT security audits, coordinated incident response, and communicated risk findings directly to C-level stakeholders — bringing both technical depth and business awareness to every engagement.

Available for freelance contracts and project-based work in network security, firewall audits, SIEM implementation, and compliance preparation (ISO 27001, NIS2).

Languages: Italian (native), English (C1), Spanish (B1), German (A2).

Languages

Italian
Native or bilingual
English
Fluent
Spanish
Conversational

Workplace preferences

Can work on-site

Zurich (up to 50km)

SIX Group
Network Security Engineer
July 2023 - January 2025 (1 year and 6 months)
Zürich, Switzerland
– Implemented, managed, and troubleshot firewall policies (Palo Alto, Fortinet) across a major Swiss financial market infrastructure, ensuring compliance with strict regulatory and security requirements. – Administered the Tufin Suite (SecureChange, SecureTrack, SecureApp) end-to-end: technical reviews, change request management, user onboarding, and OS lifecycle updates. – Leveraged Splunk for log analysis and real-time firewall connection troubleshooting, improving incident detection and response times. – Led Security SWIFT audits successfully and within deadlines — identified and remediated critical firewall vulnerabilities, measurably strengthening the company's network security posture. – Managed incidents and change requests through Jira Service Desk, maintaining SLA compliance and ensuring thorough audit-ready documentation.
Audit palo alto Fortinet Firewall vpn
SKY
Junior Network Security Engineer
April 2021 - April 2023 (2 years)
Italy
– Managed and troubleshot firewall policies across Cisco ASA, Palo Alto, Checkpoint, Pulse Secure, and Imperva WAF in a large-scale enterprise environment. – Led incident response activities: threat investigation, root-cause analysis, and remediation coordination using Splunk SIEM and CheckMK. – Designed and deployed secure load balancing solutions with F5 and Imperva SecureSphere/Incapsula, improving application resilience. – Administered CyberArk IAM for privileged account creation, recovery, and access control. – Migrated and configured site-to-site VPNs (Cisco Firepower, IPsec/IKEv1-v2), troubleshooting all connectivity phases to ensure business continuity. – Communicated risk assessments and incident summaries to both technical teams and C-level stakeholders.
ByteZero – F.A.O.
Junior Network Engineer (Internship)
November 2020 - April 2021 (5 months)
Rome, Metropolitan City of Rome Capital, Italy
– Provided technical support and network troubleshooting (ping, tracert, telnet, SSH). – Assisted in the configuration of firewalls, routers, and switches; supported Cisco Meraki deployments. – Contributed to network monitoring tasks and device management activities.