Riccardo Schirone
Senior Security Engineer, Research at Trail of Bits
Milan, Lombardy, Italy
Summary
🤩
Rockstar🎓
Top SchoolRiccardo Schirone is a Senior Security Engineer specializing in research-driven software security, with 12 years of experience applying automation and AI to program analysis, fuzzing, and supply-chain hardening. He helped design and implement Buttercup, an LLM-based multi-agent Cyber Reasoning System that earned 2nd place and a $3M award in DARPA’s AIxCC, and remains the top contributor to the project. A long-time open-source contributor and core member of Rizin, he has deep hands-on expertise in reverse engineering projects like radare2, Capstone, and Cutter, plus practical fuzzing work in OSS-Fuzz. He combines academic pedigree from UC Berkeley/Università degli Studi di Milano with production-focused security at Trail of Bits and Red Hat, bridging research prototypes and deployable tooling such as Sigstore integrations. Comfortable across low-level binary analysis and ML-enabled workflows, Riccardo often surfaces non-obvious risks—like attacker capabilities amplified by LLMs—and builds tooling to make those risks actionable for defenders. Based in Milan, he’s motivated by creating community-focused tools that scale learning and real-world impact.
12 years of coding experience
9 years of employment as a software developer
University of MilanInformatica, Informatica at ITI Pino Hensemberger
English, Italian
Github Skills (36)
cut10
debugging10
debug10
c-language10
system-programming10
dis10
python10
slicer10
cookiecutter10
c-programming10
c1110
binarydiff10
x8610
security10
c1710
Programming languages (17)
Github contributions (5)
radareorg/radare2
Aug 2013 - Feb 2021
UNIX-like reverse engineering framework and command-line toolset
Role in this project:
Back-end Developer
Back-end DeveloperContributions:421 reviews, 685 commits, 862 PRs in 7 years 6 months
Contributions summary:Riccardo primarily focused on reverse engineering tasks within the Radare2 framework. The contributions centered on addressing and fixing autocompletion issues, which involved modifying the `dietline.c` source file. Further changes included resolving issue 195 and fixing linker flags on darwin. Additional commits addressed compilation issues on macOS for the i4004 architecture and improved the Mach0 format parser, indicating a focus on software analysis and binary reverse engineering.
unixbinary-analysissecurityradare2forensics
draios/sysdig
Mar 2014 - Nov 2017
Linux system exploration and troubleshooting tool with first class support for containers
Role in this project:Back-end Developer
Back-end DeveloperContributions:149 commits, 56 PRs, 70 pushes in 3 years 8 months
Contributions summary:Riccardo primarily contributed to bug fixes and feature enhancements within the system exploration and troubleshooting tool, `sysdig`. They addressed issues related to uninitialized variables, buffer overflows, and implemented functionality for hex output formats. Their work involved modifications to core files, including those for chisels, filters, and the main sysdig program, indicating a focus on improving the tool's stability and functionality. These changes included adding command-line options, and expanding support for different data presentations.
containerstroubleshootingseccomplinuxdocker
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.