07/15/2025 updated

**** ******** ****
100 % available

Independent Cyber Security Expert

Budapest, Hungary
Worldwide
Computer Science BSc.
Budapest, Hungary
Worldwide
Computer Science BSc.

Profile attachments

CV_Sandor_Toth.pdf

PHPArtificial IntelligencePenetration TestingTelecommunicationsComputer SecurityComputer ProgrammingFinancesHealth CareMobile Application SoftwareOWASPPhishingSecurity AwarenessSecurity TestingSimulationsMobile SecurityStakeholder ManagementTechnical DocumentationYii PHP FrameworkThreat ModelingTestingSafety PrinciplesVulnerability Analysis
Penetration Testing
Extensive experience in conducting external and internal penetration testing of systems and applications, with successful completion of numerous projects for clients in finance, telecommunications, and healthcare industries.

Vulnerability Assessment
Expertise in exploiting known and new vulnerabilities in web and mobile applications using both manual and automated techniques based on OWASP methodology, creating detailed technical reports with remediation recommendations.

AI/ML Threat Modeling
Specialized knowledge in AI/ML threat modeling, testing GenAI solutions for prompt injection and evaluating secure AI model deployment since 2024.

Red Teaming
Experience in red teaming operations, simulating real-world attacks to identify security weaknesses in client systems.

Mobile Security
Proficiency in assessing and securing mobile applications, identifying vulnerabilities specific to mobile platforms.

Phishing Attacks
Knowledge in simulating and analyzing phishing attacks to improve organizational security awareness.

Coding
Programming skills with experience in PHP, Yii Framework, and custom tool development for security testing purposes.

Technical Documentation
Ability to write comprehensive reports detailing findings and recommendations for remediation, presenting results to management and stakeholders.
 

Experience

Professional experience5 - 10 years
Freelancer since2022

Languages

GermanBasic knowledgeEnglishFluentHungarianNative speaker

Project history

Independent Cyber Security Expert

Quantum Security
Developing and executing test plans. Conducting external and internal penetration testing of systems and applications. Writing comprehensive reports detailing the findings and recommendations for remediation. Presenting results and findings to management and stakeholders. Providing technical support to clients and stakeholders.

IT Security Specialist

Docler Holding
Exploiting known and new vulnerabilities in web and mobile applications using both manual and automated techniques based on OWASP methodology. Performing external and internal infrastructure penetration tests and vulnerability assessments. Create detailed technical reports of security tests. Working with developers, helping them to understand risk and problem of issues, suggesting possible fix for vulnerabilities based on JIRA tickets. Performing source code review.

IT Security Advisor

KPMG
Exploiting known and new vulnerabilities in web and mobile applications using both manual and automated techniques based on OWASP methodology. Performing external and internal infrastructure penetration tests and vulnerability assessments. Create detailed technical reports of security tests.

IT System Developer

Invitel
System Development with PHP, Yii Framework, and Oracle.

Certificates

CPSA

CREST

2024

OSCP

Offensive Security

2018

OSCE

Offensive Security

2018


Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in