Ivan Bianchini · Italy

Cybersecurity engineer & malware analyst.

I take apart hostile software to understand how it works, then build the defences that stop it: reverse engineering, threat intelligence, SOC operations and low-level Windows internals.

Get in touch Download CV (PDF)
  • Based inItaly
  • RelocationUSA / Canada
  • LanguagesItalian, English
  • StatusOpen to opportunities

01 About

Curious about what happens beneath the surface.

I have been drawn to how computers work under the hood since I was young, and over time that curiosity turned into a focus on information security. My work centers on malware behavior, reverse-engineering Windows executables, and applied cryptography.

Alongside hands-on work, I write technical articles on executable obfuscation in the age of AI, the evolution of modern threats, and classical block ciphers. I care about the details, and I enjoy explaining how things work.

02 Expertise

From the first suspicious sample to the last detection rule.

Security

  • Malware analysis
  • Threat intelligence
  • Penetration testing
  • SOC (SIEM, FW, EDR)
  • Endpoint security

Reverse engineering

  • Static & dynamic analysis
  • Disassembly
  • Debugging
  • PE internals
  • Obfuscation

Code

  • C
  • Java
  • C#
  • PHP
  • VBS
  • Win32 API
  • NtAPI

Network

  • TCP/IP
  • Firewalling
  • Traffic analysis
  • Hardening

Cryptography

  • Block ciphers
  • Symmetric
  • Asymmetric
  • Hashing

Tools

  • IDA
  • x64dbg
  • WinDbg
  • Wireshark
  • dnSpyEx
  • Recaf

03 Approach

Finding the one byte that doesn't belong.

Most of the job is separating signal from noise: classifying a family, mapping command-and-control infrastructure, or spotting the single anomalous behavior in a sea of normal activity. Then turning that understanding into detection, hardening and clear remediation.

04 Experience & education

Where I've worked and studied.

  1. 2026 — nowWork

    Co-Founder, DRM & Virtualization Engineer

    Lapse · Worldwide

    • Co-founded Lapse and lead development of Blackout, a Java DRM built on a stack-based native virtual machine.
    • Protect Java applications through code virtualization, runtime integrity verification, and anti-tampering mechanisms that block unauthorized modification and reverse engineering.
  2. 2025 — nowWork

    Cyber Security Engineer, SOC L2/L3

    BlueIT S.p.A. · Remote (Italy)

    • Design and operate security for SMB and enterprise clients across the full SIEM, EDR, and firewall lifecycle, with proactive monitoring and threat defense.
    • Run vulnerability assessments and web application penetration tests, delivering concrete remediation guidance.
    • Perform malware analysis and lead incident response, containing attacks and restoring operations with minimal downtime.
    • Build secure Java tooling, including logging systems and packing/obfuscation to harden code against reverse engineering.
  3. 2022 — 2026Work

    Malware Analyst

    Freelance · Remote (Italy)

    • Analyzed in-the-wild malware to determine capabilities and attribute samples to known families.
    • Reverse-engineered samples using automated sandboxes and virtual machines.
    • Mapped command-and-control (C2) infrastructure to profile threat-actor tactics and operations.
  4. 2024 — 2025Work

    Cyber Security Analyst & Consultant

    AGM Solutions · Hybrid (Italy)

    • Operated in TIM's 24/7 SOC, one of Italy's largest, protecting critical infrastructure across 20,000+ systems (Splunk, CrowdStrike).
    • Delivered cyber security consulting to high-profile clients, safeguarding critical infrastructure, sensitive data, and reputation.
    • Started as a security analyst intern focused on network security, SIEM, and threat intelligence.
  5. 2022 — 2024Education

    Associate Degree, IT & Cybersecurity (EQF Level 5)

    ITS Angelo Rizzoli, Higher Technical Institute (Italy)

    • Two-year post-secondary technical program equivalent to a U.S. Associate Degree (EQF Level 5).
    • Concentration in IT infrastructure, cybersecurity, and software development.
    • Project-based curriculum with strong industry involvement.
  6. 2017 — 2022Education

    High School Diploma, Computer Science (EQF Level 4)

    Technical Secondary School (Italy)

    • Five-year technical secondary program in computer science.
    • Foundations in programming, networks, databases, and systems.

05 Certifications

Credentials, verified.

06 Writing

Notes from the debugger.

Executable Obfuscation in the Age of Advanced AI

Why established obfuscation techniques lose ground to AI-assisted analysis.

Common Malware Is Dead (in Italian)

The decline of classic stealers and where modern threats are heading.

Lucifer Block Cipher, Part 1 (in Italian)

A close look at the Lucifer block cipher and low-level Windows programming.

07 Contact

Have a threat to understand or a product to protect?

I'm open to new opportunities, including relocation to the USA and Canada.

[email protected] LinkedIn Download CV (PDF)