Gianni D'aprile
VP IT Security And Compliance at BJ's Wholesale Club
Southborough, Massachusetts, United States
Summary
👤
Senior🎓
Top SchoolGianni D'aprile is a seasoned IT security and compliance leader with over 10 years in senior technology roles and more than two decades of hands-on infrastructure experience across retail and service industries. As VP IT Security and Compliance at BJ's Wholesale Club and former VP of Tech Services at Books-A-Million, he blends strategic governance in cybersecurity, data privacy, and retail technology with operational command of network and privacy programs. He pairs executive leadership with practical engineering chops—contributing to the open-source Wazuh project by integrating active response with NetBSD's NPF firewall and improving syslog/CEF outputs for JSON/Splunk compatibility. Based in Southborough, MA, Gianni is comfortable translating complex regulatory and security requirements into auditable, production-ready controls. His background in economics and computer science from Vanderbilt underpins a pragmatic, risk-focused approach to protecting large-scale retail environments. Colleagues describe him as a steady operator who equally values technical detail and cross-functional collaboration.
10 years of coding experience
14 years of employment as a software developer
Bachelor's degree, Economics/Computer Science, Bachelor's degree, Economics/Computer Science at Vanderbilt University
English, Portuguese, Spanish
Github Skills (16)
cybersecurity10
sh10
firewall10
script10
manage10
shell10
incident-response10
scripting10
security10
sia9
syslog9
cefglue8
cefpython8
wazuh8
log-analysis8
Programming languages (7)
Github contributions (5)
wazuh/wazuh
Jan 2016 - Feb 2017
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Role in this project:
Security Engineer
Security EngineerContributions:10 commits, 6 PRs, 1 comment in 1 year 1 month
Contributions summary:Gianni primarily contributed to the active response functionality, specifically focusing on firewall integration with NetBSD's NPF firewall. They implemented the `npf.sh` script for blocking and unblocking IP addresses and ensured the active response system's integration with the OSSEC platform. Furthermore, the user made changes to the syslog/CEF output format to align with JSON/Splunk standards by mapping the "group" classification to the "cat" field.
malware-detectionendpointscompliancecloud-securitysecurity-hardening
giannidaprile/ossec-hids
Nov 2015 - Oct 2020
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Contributions:18 pushes, 20 branches in 4 years 11 months
policyreal-time-detectionintegritypolicy-monitoringfile-integrity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.