Federico Pulcino

Completed 100+ hours of hands-on penetration testing labs covering network enumeration, web application exploitation, and host-based privilege escalation Earned the eJPT credential from INE Security through a 4-machine DMZ scenario, including one host requiring pivoting into an internal network with strong emphasis on thorough enumeration at every stage

eJPT Preparation — Penetration Testing Labs at Independent Study & Certification (2026-03 – 2026-09)

• Completed 100+ hours of hands-on penetration testing labs covering network enumeration, web application exploitation, and host-based privilege escalation
• Earned the eJPT credential from INE Security through a 4-machine DMZ scenario, including one host requiring pivoting into an internal network with strong emphasis on thorough enumeration at every stage

Cybersecurity Research Intern at Tinexa Cyber (2025-09 – 2026-03)

• Designed a declarative normalization engine (JSON Schema validation) to standardize heterogeneous logs into OCSF-compliant events with 100% automated schema validation, and simulated adversary TTPs across 3 attack vectors (phishing, ransomware, credential dumping), generating ∼13,500 labeled events per run to validate detection pipelines
• Reduced model input dimensionality by 67% (61→20 features) via statistical feature engineering, and benchmarked detection algorithms on highly imbalanced datasets (2–7% attack rate) to identify optimal approaches for malicious activity detection

Java Software Developer Intern at Gruppo Info (2023-02 – 2023-06)

• Audited contract records across 700+ active contracts, preventing registration failures with the Italian Revenue Agency, and collaborated with development teams to debug and optimize database queries ensuring accurate IMU/registration tax calculations and regulatory compliance

INE eJPT Certified

Master of Science in Computer Science – University of Milano Bicocca (2023-09 – 2026-03)

Bachelor of Science in Computer Science – University of Milano Bicocca (2020-09 – 2023-07)