Experience

Web Application Security | IT Security Analyst
Vaimo | 03.2026 – Present

Conducting internal security audits of applications and infrastructure (including audits for AI-related projects),
Reviewing project code, architecture, and infrastructure to identify vulnerabilities and enforce secure development standards,
Performing, coordinating and managing penetration testing,
Developing tools and scripts to help delivery teams enforce and monitor compliance with security policies,
Supporting developers by providing recommendations, guidance, and security best practices,
Monitoring the overall security posture of systems and applications, ensuring continuous compliance with internal standards,
Performing root cause analyses and helping teams mitigate incidents or vulnerabilities,
Developing and delivering security awareness training and documentation for internal teams,
Acting as a security evangelist, promoting a culture of security across teams.

Performing manual penetration tests of IT systems (both applications and infrastructure) by defining test procedures and test cases, and executing tests,
Managing the reporting phase of testing and ensure clarity of reported findings by delivering clear and understandable reports for business stakeholders and ensuring proper follow-up,
Performing Vulnerability Scanning,
Performing Configuration Review and Audits,
Assessing the security posture of both the individual applications and infrastructure landscape,
Developing automatic tests and test environments,
Providing support to other Information Security functions, such as Vulnerability Management and Incident Management,
On-boarding and mentoring junior employees.

Performing manual penetration tests of IT systems (both applications and infrastructure),
Managing the reporting phase of testing and ensure clarity of reported findings by delivering reports for business stakeholders and ensuring proper follow-up,
Performing Vulnerability Scanning,
Assessing the security posture of both the individual applications and infrastructure landscape.

main focus on rebranding from programming to cybersecurity,
running the university software house where I helped students acquire knowledge and contact them with local companies,
conducting lectures for the university and high schools (most often on cybersecurity),
performing various programming-related tasks on a casual basis.

writing internal tools to help developers and sales teams (e.g. automatic testing of the server and backup software),
software testing,
customer database management,
improving competences and learning programming.