Ciro Bologna

Background

About Ciro Bologna

Security Architect, Engineer at heart, advocate of a pragmatic approach to Cybersecurity.Started career as software developer at QUI! Group in Naples, enjoyed coding web applications and REST API, along playing with SQL and NoSQL databases and UNIX servers, occasionally travelling to Rome and Genoa to build meaningful relationship with colleagues and different teams.Moved pretty soon into the security space for getting hands on cryptography, authentication protocols, hardware security modules, threat modeling but also payment standards and various frameworks. Attended security related workshops at University Of Trento.Becoming part of architecture team in the same company has been opportunity to analyze and solve the IAM scouting problem where the opensource was chosen to implement API gateway protected by OAuth 2.0 and SAML federation use cases.Moved to London to join the amazing Identity and Access Management team in Barclays, where security requirements have been often translated into added business value for the customers across various project related to the Open Banking. Collaboration with external teams like Application Security, Penetration Testing, Performance Testing and DevOps have been key to increase both technical and communication skills with world wide distributed colleagues.ISC2 CISSP certification has also been an important achievement.Currently still London based in a full remote Software Security Architect position at Hyland where first mission was to increase security of the Alfresco product and its customers, engaging with architects and developers, support teams and account managers to make SAST, SCA and PenTest part of the SDLC. Moved to a different team to focus on Hyland Experience, cloud native platform for intelligent content services and process automation with no/low code applications to solve new challenges like scaling DevSecOps practices into CI/CD for multiple teams, vulnerability management process adoption and Threat Modeling activities closely working with developers and architects to deliver secure by design solution to existing and future customers!p.s. resumed and completed master degree after many years to have fun with automated penetration testing driven by CVE related information, and have now just started studying for ISC2 CSSP!