👷‍♂️ Senior Security Professional with 15+ years of experience transitioning from Tier-1 DevSecOps to Smart Contract Security Auditing. Fluent in English, Spanish and Italian.



🛠️ Core Technical Stack (Consolidated Matrix):

✅ Web3 / Smart Contract Security: Solidity, EVM, smart-contract auditing, Slither, Foundry, fuzzing harnesses, MEV, flash loans, oracle manipulation.

✅ DevSecOps & CI/CD: GitHub, GitHub Actions, GitLab CI, Jenkins, Azure DevOps, ArgoCD, Atlassian Bamboo, GitOps, ALM, SDLC security, code review.

✅ Container Platforms & Orchestration: Red Hat OpenShift (S2I, CoreOS, oc, Operators), Kubernetes, Helm, Istio (service mesh), Kafka (Strimzi), Docker, Red Hat OpenStack.

✅ Application Security: SAST, DAST (OWASP ZAP), SCA (OWASP Dependency-Check, Trivy, Dependabot), OWASP SAMM, NIST SSDF, SBOM (Syft), supply-chain security (Sigstore/cosign), Falco, HashiCorp Vault, SonarQube.

✅ Cloud & IaC: Azure, AWS (EKS, Lambda, CloudFormation), GCP (GKE), Terraform, Ansible, Puppet, Kyverno / OPA Gatekeeper.

✅ Observability & SIEM: Prometheus, Grafana, Alertmanager, Splunk Enterprise Security, Microsoft Sentinel, Microsoft Defender.

✅ Databases: MS SQL Server, MySQL, Postgres, MongoDB.

✅ Standards & Compliance: ISO/IEC 27001, ISO/IEC 22301, ISO/IEC 31000, PCI-DSS 4.0, NIST, CIS, GDPR, NIS 2.



✨ Profesional Experience ✨

🚀 Web3 Security Researcher, HCLTech (Financial Intermediaries) — Bucharest, May 2023 – Present

• Conduct adversarial security research on Ethereum / EVM smart-contract systems (Solidity), identifying criticalvulnerability classes across pre-deployment and production codebases.

• Apply static and dynamic analysis (Slither, Foundry, custom fuzzing harnesses) and produce reproducible proof-of-concept exploits with severity classification and remediation guidance.

• Analyze code and communicate review findings to protocol engineering teams, embedding secure developmentpatterns throughout the SDLC.

• Build internal security tooling and automation to scale vulnerability discovery and standardize research methodology.



🚀 DevSecOps Expert (Deutsche Bank UK), HCLTech — Bucharest, Oct 2022 – Apr 2023

• Operated enterprise Kubernetes clusters for deployment and scaling of containerized banking applications, ensuringhigh availability and zero-downtime rolling updates across Production and DR environments.

• Designed and maintained complete CI/CD pipelines using GitHub Actions (multi-stage, reusable workflows, matrixbuilds) for Java Spring Boot (Maven) and Rust (Cargo + musl) microservices, integrating security gates automatically.

• Integrated SAST across Java and Rust codebases and DAST using OWASP ZAP (baseline, active scan, API scripting)directly in pipelines, with fail-fast enforcement and automated reporting to the security team.

• Configured SCA for Maven and Cargo dependencies (OWASP Dependency-Check, Trivy, Dependabot) with automaticblocking of vulnerable artifacts (CVSS ≥ 7.0).

• Developed modular Infrastructure-as-Code with Terraform (remote state in S3 + DynamoDB) for Kubernetes clusters,VPC networking, ingress-nginx, cert-manager, and policy enforcement (Kyverno / OPA Gatekeeper).

• Implemented container and Kubernetes hardening: image scanning (Trivy / Grype), Pod Security Admission, NetworkPolicies, RBAC, External Secrets Operator + HashiCorp Vault, and runtime protection with Falco.

• Advanced DevSecOps maturity to an “Advanced” level per OWASP SAMM and NIST SSDF, including policy-as-code,supply-chain security (Sigstore/cosign), and SBOM generation (Syft).

• Ensured compliance with banking standards (PCI-DSS 4.0, ISO 27001, GDPR, National Bank requirements) through automated reporting, evidence collection, and full audit trails.



🚀 DevSecOps Engineer (UniCredit S.p.A., Italy), Axsys Romania — Bucharest, Mar 2022 – Sep 2022

• Built and administered private-cloud infrastructure on Red Hat OpenStack and deployed containerized workloads via Red Hat OpenShift, creating and managing pods and clusters across the platform.

• Packaged and deployed applications to OpenShift using Helm charts, standardizing templated, versioned releases across environments.

• Deployed and configured Istio service mesh for secure service-to-service communication (mTLS), traffic management, and observability across microservices.

• Managed OpenShift / OpenStack node lifecycle on Red Hat Enterprise Linux (RHEL) and CoreOS, including OS patching, user access controls (PAM / sudoers), and kernel-parameter tuning for high-performance private-cloud networking.

• Secured the container ecosystem at the Linux-kernel level — configuring cgroups and namespaces for strict process isolation and auditing file permissions to prevent privilege escalation on host nodes.

• Led DevSecOps activities across vulnerability scanning, certificate management, password-policy management, and remediation/patching coordination.

• Analyzed code and communicated code-review findings to development teams; enforced shift-left compliance for the Spring Boot stack via Maven-integrated SCA in Jenkins pipelines, blocking vulnerable transitive dependencies before packaging.



🚀 Senior DevOps Engineer (LEGO Group, Denmark), Arnia Software — Bucharest, Sep 2021 – Feb 2022

• Managed the lifecycle of OpenShift clusters, ensuring seamless upgrades and patching of the underlying CoreOS nodes.

• Optimized the developer experience with OpenShift Source-to-Image (S2I) workflows, letting teams push code directly from Git while OpenShift built secure, versioned container images — streamlining code-commit to deployment without complex Dockerfile management.

• Managed application deployments with Helm charts, enabling repeatable, parameterized releases across OpenShift environments.

• Provisioned Azure infrastructure with Terraform and Ansible, writing reusable, well-tested infrastructure code.

• Designed and maintained SIEM use cases within Splunk ES, focusing on high-fidelity alerting and compliance reporting.

• Worked with AWS services (EKS, CloudFormation, CloudWatch, Lambda, API Gateway, Aurora) and monitoring stacks (Prometheus, Grafana).



🚀 DevSecOps Specialist (Nordic RSC, Denmark), GE Digital — Bucharest, Jul 2019 – Aug 2021

• Developed and maintained backend services in Go (net/http, gRPC/REST APIs), handling high concurrency, request routing, and robust error handling.

• Maintained critical backend components for Longhorn and the Kubernetes CSI storage provider in Go, focusing on high availability volume attach/detach/recovery workflows and CSI compliance.

• Built observability into all services with Prometheus (client_golang), distributed tracing, and structured logging.

• Operated Kafka (via Strimzi) on Kubernetes to support event-driven microservice architectures, and integrated SonarQube quality gates into Maven pipelines for Quarkus / JBoss services.

• Managed ingestion, normalization, and correlation of security data into Microsoft Sentinel; conducted threat hunting and tuned automated investigation and response via Microsoft Defender.

• Embedded shift-left security into Spring Boot microservices via Maven build profiles triggering SAST and SCA during compilation, before artifacts reached the Nexus Repository.

• Architected multi-stage Azure DevOps YAML pipelines with mandatory security gates (SAST, secret scanning, dependency checks) deploying to Azure Kubernetes Service (AKS).

• Performed security risk assessments and application/network vulnerability scanning; mentored team members and drove security awareness across the organization.



🚀 IT System Engineer / Cloud Engineer, BullGuard — Bucharest, Apr 2018 – Jun 2019

• Served as Cloud Engineer for a global B2C cybersecurity vendor, migrating critical backend infrastructure to Microsoft Azure and adopting modern DevOps practices.

• Provided architectural recommendations to improve efficiency, reliability, and performance while reducing cost.

• Deployed Prometheus and Grafana for advanced monitoring, enabling proactive resolution of performance bottlenecks.

• Contributed to Agile ceremonies and collaborated with architects to define secure, scalable enterprise cloud products.



🚀 Linux System Administrator, StarTechTeam — Bucharest, Apr 2014 – Mar 2018

• Administered a complex RHEL6 environment, performing kernel upgrades, security patching, and driver integration to ensure 99.9% availability.

• Managed VMware ESXi virtualization (VM lifecycle, snapshots, resource allocation) and improved the virtualization stack.

• Used Puppet for configuration management to enforce desired state and compliance across systems.

• Executed backup/restore procedures and monitored system health to ensure business continuity.



🚀 Help Desk Support Specialist (Italian), Genpact — Bucharest, Jan 2009 – Mar 2014

• Managed the end-to-end incident lifecycle for complex telecom faults (VoIP, MPLS, Fiber), bridging enterprise clients and T3 network engineers.

• Resolved T1/T2 technical and product support inquiries via ticketing, live chat, and phone; escalated and tracked faults through resolution.



✨ Education ✨

EITCA Information Technologies Security Programme (EITCA/IS) — EQF Level 6 EITCA Academy, Brussels, Belgium | 2025 – 2026

EITCA Artificial Intelligence Programme (EITCA/AI) — EQF Level 6 EITCA Academy, Brussels, Belgium | 2024 – 2025

Master's Degree, Law Spiru Haret University, Bucharest | 2008 – 2010

Bachelor's Degree, Law Spiru Haret University, Bucharest | 2004 – 2008



✨ Certifications ✨

Web3 & Blockchain

Cloud & DevSecOps

AI & Data