WHAT DO YOU DO?

I lead the Cyber Consultancy Team at URM, defining the services we offer, how we deliver them and the standards we work to. I make sure the Team has what they need to excel and review work to keep quality consistently high. I spend a good amount of time with clients, understanding what they need to protect, matching the right testing approach, and turning that into clear proposals. And when it adds value, I still get hands-on, assessing the security of our clients’ systems and helping fix what we find.

Why do you do it?

I spent years “breaking” into systems and now I enjoy the “making” side of the role. I joined URM in 2022 to help build an outstanding Cyber Consultancy Team and have loved it. Shaping how we work, hiring great people, and watching the team and each person in it grow gives me great satisfaction. I also still enjoy exploiting and chaining vulnerabilities, demonstrating impact and helping clients strengthen their security.

What kind of projects have you been involved in? 

My main project is growing the team in a way we’re proud of, with focus on quality and people. On the client side, I’ve been involved in multiple types of penetration tests, red teaming and social engineering engagements. Sometimes that gives clients assurance about their security posture; other times it identifies critical issues (such as SQL injections on publicly exposed websites or attack paths that would allow full domain compromise) early, so they can fix them before a real threat actor can take advantage.

What’s on top of your bucket list? 

II used to travel a lot more before I had kids- I still love it, just do less of it. Top of the list would be exploring more of Asia. I have Korean origins, grew up in Italy before moving to the UK, and so far Korea and China are the only Asian countries I have visited.