01 / ABOUT — SYSTEM PROFILE

Marco
Fornari

I monitor, analyse, correlate.
I build tools to understand where systems fail.

Trajectory

2022–24  STORYTELLING · AUDIOVISUAL
2025–26  WEB & SOFTWARE DEVELOPMENT
2026      SECURITY OPERATIONS & ENGINEERING

Profile

Hi, I'm Marco: Junior SOC Analyst and developer, focused on security operations and system engineering. I have hands-on experience in email threat detection, log analysis and threat intelligence on containerized Linux environments.

I designed an anti-phishing and Business Email Compromise platform for SMBs, with header and URL analysis, IoC extraction and correlation across 5 threat intelligence feeds. The resulting risk scoring supports event triage and escalation, with rate limiting, caching and fallback for service continuity.

Training in Cybersecurity, Cyber Risk & Data Protection (Università Politecnica delle Marche, Google Cybersecurity Certificate). ITS diploma in Industrial Software Development with 110/110 cum laude, CEH in preparation.

I have a degree in Arts and Performance Studies and years of audiovisual production behind me: this gives me clear technical communication, critical thinking and independent project ownership.

Current stack

C#.NET 10ASP.NET CORE JAVASCRIPTSQLPOSTGRESQL DOCKERLINUXGIT

Security focus

PHISHING & BEC DETECTION THREAT INTELLIGENCE IOC CORRELATION RISK SCORING DLP DATA PROTECTION APPLICATION SECURITY

02 / EXPERIENCE — SYSTEM HISTORY

Story →
Code →
System →
Security

FEB 2026 — JUL 2026

Junior Developer · Security Engineering

OVERSIDE SRL

Development of Overguard, an email security platform against phishing and Business Email Compromise for SMBs: automated analysis of SMTP headers, sender, domain and URLs with IoC extraction and correlation; multi-signal risk scoring across 5 threat intelligence feeds to support event triage and escalation; rate limiting, verdict caching and source fallback for detection continuity, plus a semantic DLP module on outbound content. Backend in .NET 10 Clean Architecture, PostgreSQL, JWT-secured REST APIs, Docker deployment on Linux; Chrome MV3 and Thunderbird MV2 extensions integrated with the backend.

C#.NET 10ASP.NET CORE POSTGRESQLREST APIJWT DOCKERLINUXGIT
PHISHING & BEC DETECTIONEMAIL ANALYSIS IOCRISK SCORINGDLP VIRUSTOTALGOOGLE SAFE BROWSING URLSCAN.IOHYBRID ANALYSIS ALIENVAULT OTX

APR 2025 — JAN 2026

Junior Developer

LEVANTE YACHTS SRL

Automation of portal content publishing via REST APIs (WordPress, Google Sheets); MySQL database management with SQL queries for data verification and cleanup; frontend and backend development (HTML, CSS, JavaScript, PHP).

HTMLCSSJAVASCRIPT PHPMYSQLWORDPRESS APIS GOOGLE SHEETS APIS

Education & Certifications

IN PROGRESS — 2026

CEH — Certified Ethical Hacker

EC-COUNCIL

Ethical hacking, penetration testing, vulnerability assessment, attack techniques, security controls.

2024 — 2026

ITS Smart Academy

INDUSTRIAL SOFTWARE DEVELOPER
EQF LEVEL 5 · 110/110 CUM LAUDE

Two-year higher technical program in industrial software development.

2024

Università Politecnica delle Marche

CYBER RISK & DATA PROTECTION

Cybersecurity, data protection, GDPR, software security, information security, cyber risk management.

2024

Google Cybersecurity Certificate

FOUNDATIONS & OPERATIONS

Python, Linux, SQL, SIEM, IDS, risk assessment, threat identification, security controls.

Skills

01

Development

C#.NET 10ASP.NET CORE ENTITY FRAMEWORKJAVASCRIPTPHP FLUTTERSQLPOSTGRESQL MYSQLGIT

02

Cybersecurity

PHISHING & BEC DETECTIONEMAIL SECURITY THREAT INTELLIGENCEIOC CORRELATION RISK SCORINGLOG ANALYSIS CYBER RISKRISK MANAGEMENT DATA PROTECTIONDLP APPLICATION SECURITY

03

Tools & Infrastructure

LINUXBASHDOCKER REST APISJWT SEMGREPNPM AUDIT

04

Human skills

CRITICAL THINKINGANALYTICAL THINKING TECHNICAL COMMUNICATIONPROBLEM SOLVING CLIENT COMMUNICATIONADAPTABILITY ATTENTION TO DETAILPROJECT MANAGEMENT

03 / CONTACT — OPEN CONNECTION

Let’s build something
worth understanding.