PIERGIORGIO LADISA
Offensive Security Engineer · Red Team Operator
Software Supply Chain Security
$ cat about.txt
I'm an Offensive Security Engineer specializing in software supply chain security, currently working in offensive security and red team operations within the financial sector.
My research focuses on malicious code in third-party dependencies, offensive techniques across the SDLC, and CI/CD pipeline security. I hold a PhD in Computer Science and authored 6 papers published at venues including IEEE S&P and ACSAC, earning over 400+ citations.
In my spare time I responsibly disclose vulnerabilities found in CI/CD pipelines.
$ skills --list
// offensive
// programming
// spoken
$ ls research/
// publications
Google Scholar →On the Feasibility of Cross-Language Detection of Malicious Packages in npm and PyPI
$ cat experience.log
- Red Team Operations across five global locations; identified several critical vulnerabilities
- Designed and executed adversary simulation exercises to improve organizational resilience
- Security research on novel CI/CD threats; discovered 3+ critical internal vulnerabilities
- Core team expertise: software supply-chain security, cloud security
- Enhanced cloud-native security practices: CI/CD pipelines, Kubernetes, Docker
- Threat modeling for the software supply chain; drove gap analysis and security posture improvements
- Led secure SDLC initiatives across multiple engineering teams
- Designed and delivered training for security champions and penetration testers
- Industrial PhD specializing in open-source security and software supply chain attacks
- Developed comprehensive OSS attack taxonomy; identified 60+ zero-day malwares
- Enhanced internal SDLC security through threat analysis and threat modeling
- Co-authored two patents on software security
- Presented at internal conferences to audiences of 1,000+ attendees
- Web application, network, and infrastructure penetration testing
- Security characterization and research in the context of the Bitcoin blockchain
$ ls certs/ honors/
$ ping pl
Open to collaboration, speaking invitations, and responsible disclosure coordination. Reach out via any of the channels below.
// PGP key available on request