Roberto D’Andrea is a Cloud Security Engineer at CoreView, focused on threat detection, incident response, and security operations across Microsoft 365, Azure, and hybrid cloud environments.

He works hands-on with Microsoft Sentinel and Defender XDR to monitor, investigate, and respond to cloud threats. His experience spans Azure security posture management, Microsoft 365 hardening, and defensive controls across Defender for Office 365, Defender for Identity, and Defender for Cloud Apps.

At CoreView, Roberto brings a practical, detection-first view of Microsoft 365 security. His work focuses on identifying cloud and identity risks, improving operational visibility, and strengthening the controls organizations rely on to prevent, detect, and respond to attacks.

Roberto also helped develop CoreView’s training course, “Enterprise Apps and App Registrations: Why They Matter,” which covers the attack, detection, and mitigation phases of a Microsoft 365 security scenario. He holds a Master’s degree in Cybersecurity from Sapienza Università di Roma and continues to build hands-on expertise through programs such as the Pwned Labs Microsoft Cloud Attack & Defense Bootcamp.

As part of CoreView’s Intelligence Labs, Roberto brings an operator’s perspective to cloud security: practical, technical, and grounded in day-to-day detection and response work.

Master’s degree in Cybersecurity from Sapienza Università di Roma

Key certifcations:

• XINTRA - Attacking and Defending Azure & M365
• PWNEDLAB - Bootcamp on Microsoft Cloud Attack & Defense  
• INE - Certified Professional Penetration Tester - eCPPTv3
• INE - Certified Incident Responder - eCIR
• INE - Certified Threat Hunting Professional - eCTHPv2