Daniele Mucci

Staff Cloud Security Engineer - Form3

Apr 2025 - Present

I moved to a technical leadership position, taking the role of Staff Engineer with a focus on the Kubernetes and platform area.

Lead Cloud Security Engineer - Form3

Dec 2022 - Apr 2025

I took the lead the Platform Security team, whose main responsibilities involved creating and implementing security standards and guidelines for many platform components.

• SME for Kubernetes, Linux and containers security and main security contact for the engineering platform teams, performing many ad-hoc investigations, threat modeling activities, evaluations and generally contributing to the platform design.
• Lead a team of up to 4 people.
• Artifact attestation and admission control in Kubernetes using Sigstore tooling (support and experimentation).
• Lead internal initiatives to raise standards (e.g., knowledge management and documentation).

Senior Cloud Security Engineer - Form3

Apr 2022 - Dec 2022

I joined Form3 as a cloud security engineer and worked on designing, implementing, maintaining and configuring the CNAPP solution for a multi-cloud platform. I have also worked on some internal Go tooling for managing accesses to production environments.

• Rollout of CNAPP solution across multiple clusters.
• Runtime security for Kubernetes via falco/Kyverno (custom) rules/policies, in multi-cloud and baremetal environments.
• Developed just in time access capability to GCP.

Lead Security Engineer - Coolbet

Nov 2021 - Apr 2022

I led the Security Engineering team within the company. The main tasks included supporting the company's compliance objectives by recommending, designing and implementing security controls. These controls ranged from network to Kubernetes security, including securing the development pipeline, championing secure software development and application security practices. I designed, coordinated and implemented the vulnerability management program. In addition to the technical responsibilities, I managed my team resources, budget, prioritization and internal training.

• Supported the Terraformation for the self-managed identity provider
• Implemented from scratch in-house vulnerability scanner integrating FOSS tooling
• Hardened Kafka deployment using Vault

Information Security Engineer - Coolbet

Jan 2020 - Nov 2021

I moved my focus fully on security, assisting in developing the Information Security Program and policies for the organization, implementing technical controls for Kubernetes clusters and the development pipeline, and performing targeted penetration tests.

Security Operations Engineer - Coolbet

Oct 2018 - Jan 2020

In addition to the previous responsibilities, I investigated and resolved recurring issues and security incidents and worked on securing the Kubernetes clusters.

System Administrator - Coolbet

Sep 2016 - Oct 2018

I performed standard Linux administration tasks, including servers deployment and maintenance while managing multiple Kubernetes clusters.