08/21/2026 updated

**** ******** ****
100 % available

Senior Test Automation Engineer / Pentester /SDET - Web, API, Embedded & Security Testing

Vilnius, Lithuania
Only remote
MSc
Vilnius, Lithuania
Only remote
MSc

Profile attachments

Marius_Rebenciuc_CV_Cybersecurity_Professional.pdf

About me

Senior test, validation and cybersecurity assurance professional with more than 15 years of experience spanning software development, systems validation, QA automation, embedded systems and cybersecurity.

Penetration TestingAcceptance Test-Driven DevelopmentAutomatic Test EquipmentTest AutomationAutomated Testing FrameworkVulnerability ScanningSeleniumSystem Integration TestingTest DesignTest Execution EngineTest ManagementVulnerability ManagementTestingTest EquipmentTest-Driven Development (TDD)Test InstrumentationMetasploitTesting (Hardware)SAP Enterprise Threat Detection (ETD)TestrailJenkinsStatic Application Security TestingDynamic Application Security Testing
CORE EXPERTISE
  1. Test Automation Engineering / SDET
  2. Penetration Testing Leadership
  3. API Security Testing
  4. Web UI Automation
  5. Test Infrastructure Design
  6. Parallel Test Execution
  7. Embedded and Automotive Validation
  8. Performance, Load, Stress and Spike Testing
  9. Attack Surface Assessment
  10. Remediation Verification & Retesting
  11. Remote Agile Delivery
TECHNICAL SKILLS

Security Assessments and Penetration Testing: Pentera BAS, AppCheck, Burp Suite, OWASP ZAP, Nmap, Wireshark, Nuclei, Tenable (Nessus), OpenVAS/GVM, Metasploit, vulnerability validation
Test Automation: Python, JavaScript, TypeScript, Robot Framework, Selenium, Cypress, Playwright, Puppeteer, pytest, Test Wizard, Lua, Bash, PowerShell, custom scripting
API & Backend Testing: Postman, BlazeMeter, REST APIs, GraphQL, API security testing, OWASP API Top 10, backend validation
CI/CD & Reporting: Jenkins, GCP, TestRail, Jira, Confluence, automated result collection, test reporting, cloud-based validation workflows
Embedded & Automotive: Vector CANoe, CANalyzer, CANape, dSPACE, Matlab/Simulink, Lauterbach, ODIS, IBM DOORS, Rational DOORS, HiL, MiL, SiL, PiL, ECU flashing, OTA validation
Security Testing:
Cloud & Platforms: GCP, AWS, Azure, Linux, Windows, macOS
Development: Embedded C, C, C++, JavaScript, Python, Java, PHP, Kotlin, SQL, Bash, PowerShell

Experience

Professional experience0 - 5 years
Freelancer since2022

Languages

GermanBasic knowledgeEnglishFluentItalianGoodRomanianNative speaker

Project history

Lead Security Test Engineer / Pentester

University of Arts London, UK
Combined defensive security operations with hands-on penetration testing, exposure validation, vulnerability management and risk-based security assessment across endpoint, identity, cloud, network and application environments.
  • Planned and executed security assessments across more than 100 web applications and APIs, AWS assets and more than 1000 infrastructure components using Pentera, AppCheck and manual testing techniques.
  • Conducted Active Directory password-strength assessments and controlled ransomware simulations to validate defensive readiness and attack resistance.
  • Validated authentication and authorisation weaknesses, vulnerable components, exposed services, insecure configurations and exploitable attack paths, separating actionable findings from scanner noise.
  • Discovered and catalogued internet-facing assets, subdomains, APIs, cloud storage, certificates and shadow IT.
  • Monitored and investigated endpoint, identity, cloud and network events using CrowdStrike Falcon EDR/XDR, NG-SIEM and Identity Protection across Windows, Linux, macOS, AWS and MS Azure & Entra ID environments.
  • Managed security incidents through triage, investigation, containment, eradication, recovery and post-incident review, coordinating technical actions and communicating risk and restoration requirements to stakeholders.
  • Configured SIEM data ingestion, tuned detections and developed CrowdStrike Fusion workflows for phishing, account compromise, malware and infected-host scenarios.

SDET & Security Testing Engineer

EveryoneTV, London, UK

Media & Publishing

50-250 team member

  • Assessed web applications, backend services and APIs, identifying and validating authentication weaknesses, injection risks, insecure configurations and vulnerable components.
  • Worked with developers and service owners to explain findings, agree remediation actions and verify fixes through targeted retesting.
  • Deployed and tuned Splunk dashboards, searches and alerts to improve visibility of application, infrastructure and security events.
  • Developed repeatable functional and security checks using Python and JavaScript, applying security-focused QA practices to application, API and backend validation.
  • Conducted cloud and cyber-risk assessments across GCP-hosted services, including IAM, API security, data protection and backend resilience; contributed to strategy, policy, UK GDPR and awareness activities.
Technology used: Splunk, Burp Suite, OWASP ZAP, Postman, Snort, Wireshark, Python, JavaScript, Cypress, Selenium, Jira and GCP.

Freelance Security Test Automation Engineer

Continental Automotive in Frankfurt via Valantic GmbH (Remote ,Freelance)

Automotive & Vehicle Manufacturing

500-1000 team member

  • Delivered remote security test automation for an automotive embedded-systems project, focusing on ECU flashing through over-the-air update workflows.
  • Converted security requirements into traceable test conditions, cases and acceptance criteria; designed and automated suites using Python and Robot Framework.
  • Validated ECU behaviour using vehicle-communication simulations, peripherals and embedded debugging tools; diagnosed failures and reported evidence to distributed engineering stakeholders.
  • Contributed to process improvement, requirements traceability and Agile delivery within an international remote team.
Technology used: Python, Robot Framework, Vector toolset, Lauterbach debugger, Jira and Agile.

Test Automation Engineer - QA and Cybersecurity

Digital UK, London, UK

Media & Publishing

50-250 team member

  • Designed and deployed a scalable test-execution platform capable of running system-level tests across multiple devices in parallel (up to 16 embedded devices) and automatically reporting results to TestRail.
  • Automated front-end testing with Selenium and Cypress, validating functionality and interface consistency across platforms.
  • Conducted vulnerability and security assessments of connected devices using Nmap, Wireshark and network-traffic analysis; communicated findings and remediation requirements to front-end and back-end engineering teams.
  • Led vulnerability and risk assessments of CCP and Azure services across cloud and on-premises environments, applying structured testing and network-scanning techniques to identify security weaknesses.
  • Contributed to cybersecurity awareness activities and security-policy development in collaboration with IT, HR and Operations.
  • Supported the development of cybersecurity incident-recovery and contingency-planning processes.

QA Automation Specialist

Freesat Ltd, London, UK

Media & Publishing

250-500 team member

  • Led automated testing of consumer electronics and set-top-box products, simulating end-user behaviour at the user-interface level using AV capture technology and the Test Wizard suite.
  • Tested backend services and APIs using Postman, combining functional, integration and exploratory testing techniques.
  • Analysed network traffic with Wireshark to investigate communication behaviour and identify potential security concerns.
  • Developed security-testing strategies for backend services and connected consumer-electronics products.
  • Created Python and OpenCV-based performance tests and executed stress, load, spike and exploratory testing to validate reliability and resilience.
  • Automated the storage, management and reporting of test results using GCP and TestRail.

Software Test & Validation Engineer

Ford Motor Company, Dunton, UK

Automotive & Vehicle Manufacturing

500-1000 team member

  • Designed and executed automated and manual Hardware-in-the-Loop validation tests for real-time embedded powertrain systems using dSPACE, Python and MATLAB/Simulink.
  • Developed test scripts covering model-in-the-loop, software-in-the-loop, processor-in-the-loop and hardware-in-the-loop validation stages.
  • Developed and validated a LiFePO4 battery model in MATLAB/Simulink, comparing model predictions with empirical test results under real operating conditions.
  • Performed motor and powertrain testing, analysing test data against defined performance, reliability and quality criteria.
  • Investigated system behaviour, diagnosed failures and produced evidence-based technical reports for engineering stakeholders.
  • Supported requirements traceability, test planning, defect analysis and validation of embedded-system functionality.

Model-Based & Embedded Software Development Engineer

Continental Automotive, Iași, Romania

Automotive & Vehicle Manufacturing

500-1000 team member

Embedded software and model-based development role with strong testing, validation and simulation responsibilities for automotive control software.
  1. Developed test scripts for multiple validation stages including MiL, SiL and PiL.
  2. Executed unit, module, integration and hardware-level tests for embedded automotive software.
  3. Used BTC Embedded Tester and TPT for model-based and embedded software validation.
  4. Managed software requirements and traceability using Rational DOORS.
  5. Adjusted TargetLink models to meet development and testing requirements.
  6. Generated embedded C code for target platforms and authored embedded C code based on functional specifications.
  7. Developed and maintained Vector CANoe rest-bus simulations and acted as an internal trainer for Vector CANoe.
Tools: Embedded C, TargetLink, Rational DOORS, BTC Embedded Tester, TPT, Vector CANoe, MiL, SiL, PiL, automotive embedded systems

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in