About

I am a Security Risk Officer in the Global Information Security team at DLL, working on threat-based cyber security risk management across the organization. Read more here.

I am also a research and education associate at ICTI, where I work on freelance research and education projects. Previously, I worked there as an IT consultant and researcher, advising organizations on information security and ISO 27001 certification, and contributing to educational and research projects, such as teaching at VU and sporadic publications. Read more here.

I have completed my PhD at the SEC Group of Eindhoven University of Technology where I investigated the interaction between social engineering attacks and human cognition. Selected publications relate to understanding how to study SE attacks [1] and how to defend against them [2, 3, 4]. Read more here.

Before joining TU/e, I was a security analyst at a large Italian SOC and loosely involved in personal security projects. I am generally interested in information security and the consequences of enshittification of the Internet.