09/29/2026 updated
JM
100 % available
Senior AppSec (Product Security DevSecOps)
Warsaw, Poland
Only remote
Computer Forensics / Cybersecurity - Rochester Institute of Technology (2022)DevSecOps
Application Security & Secure SDLC
Expertise in threat modelling, secure SDLC reviews, API security, authentication, secrets management, SAST/DAST, vulnerability assessment and remediation across cloud-native applications and enterprise infrastructure.
Cloud Security & Infrastructure
Hands-on experience with AWS (Lambda, CloudTrail, GuardDuty, EC2), Azure, VMware, Citrix, IAM boundaries, logging enforcement, encryption baselines and workload isolation.
Vulnerability Management & Software Composition Analysis
Proficiency with Apiiro, Sonatype Nexus IQ, software composition analysis, SBOM/xBOM, Syft and Grype for identifying and remediating open-source and supply-chain risks at scale.
Security Tooling & SIEM
Practical experience with Traceable, Google SecOps / Chronicle, Microsoft Sentinel, Microsoft Defender XDR, Splunk, StrikeReady SOAR, Zeek, YARA, Volatility and Wireshark for threat detection and incident response.
Incident Response & SOC Operations
Delivery of 24/7 cybersecurity monitoring and incident response for global clients, including real-time threat investigation, SIEM rule tuning with KQL, Sentinel analytics rules and Chronicle pipelines to improve alert fidelity.
Security Automation & Scripting
Development of automated scripts in Python to validate token and API-key types, automate incident-response tasks with Tines, and build Gemini-powered CI/CD scanners that detect committed secrets and block affected pull requests.
Programming & Mobile Development
Proficiency in Python, Kotlin and Java, including development and maintenance of Android applications using MVVM architecture, unit testing, and mobile reverse engineering with Frida, JADX and APKTool.
Agentic AI & Google Technical Development
Exploration of Google Agent Development Kit (ADK) and agentic-AI architecture, working with Model Context Protocol (MCP) concepts and applying security principles such as authentication, IAM, trust boundaries and prompt-injection risk to agentic workflows.
Endpoint & Network Security
Management of Active Directory provisioning and access control, deployment of encrypted endpoints using BitLocker and Microsoft Endpoint Configuration Manager, and network diagnostics with Wireshark.
Expertise in threat modelling, secure SDLC reviews, API security, authentication, secrets management, SAST/DAST, vulnerability assessment and remediation across cloud-native applications and enterprise infrastructure.
Cloud Security & Infrastructure
Hands-on experience with AWS (Lambda, CloudTrail, GuardDuty, EC2), Azure, VMware, Citrix, IAM boundaries, logging enforcement, encryption baselines and workload isolation.
Vulnerability Management & Software Composition Analysis
Proficiency with Apiiro, Sonatype Nexus IQ, software composition analysis, SBOM/xBOM, Syft and Grype for identifying and remediating open-source and supply-chain risks at scale.
Security Tooling & SIEM
Practical experience with Traceable, Google SecOps / Chronicle, Microsoft Sentinel, Microsoft Defender XDR, Splunk, StrikeReady SOAR, Zeek, YARA, Volatility and Wireshark for threat detection and incident response.
Incident Response & SOC Operations
Delivery of 24/7 cybersecurity monitoring and incident response for global clients, including real-time threat investigation, SIEM rule tuning with KQL, Sentinel analytics rules and Chronicle pipelines to improve alert fidelity.
Security Automation & Scripting
Development of automated scripts in Python to validate token and API-key types, automate incident-response tasks with Tines, and build Gemini-powered CI/CD scanners that detect committed secrets and block affected pull requests.
Programming & Mobile Development
Proficiency in Python, Kotlin and Java, including development and maintenance of Android applications using MVVM architecture, unit testing, and mobile reverse engineering with Frida, JADX and APKTool.
Agentic AI & Google Technical Development
Exploration of Google Agent Development Kit (ADK) and agentic-AI architecture, working with Model Context Protocol (MCP) concepts and applying security principles such as authentication, IAM, trust boundaries and prompt-injection risk to agentic workflows.
Endpoint & Network Security
Management of Active Directory provisioning and access control, deployment of encrypted endpoints using BitLocker and Microsoft Endpoint Configuration Manager, and network diagnostics with Wireshark.
Languages
EnglishFluentSpanishNative speaker
Project history
Conducted threat modelling across AWS and Azure as part of the Cloud Fast Track initiative. Assessed secure-SDLC implementation across cloud-native applications including SAST and DAST integration. Evaluated internal bug-bounty operations and Red Team exercises. Remediated nearly 100% of approximately 5,000 open secrets risks via Apiiro. Partnered with engineering teams to remediate approximately 400 Apiiro SCA risks, reducing open findings by 95%. Contributed to the production integration of Sonatype Nexus IQ Repository. Managed API-security activities using Traceable. Built SBOM and xBOM proofs of concept using Syft and Grype. Developing a Gemini-powered internal CI/CD scanner. Mentoring SOC and engineering teams on security incident handling and CI/CD golden pipelines.
Delivered 24/7 cybersecurity monitoring and incident response for multiple global clients. Investigated real-time threats using Microsoft Sentinel, Splunk, Microsoft Defender XDR, StrikeReady SOAR and Google SecOps (Chronicle). Tuned SIEM rules and detection logic using KQL, Sentinel analytics rules and Chronicle pipelines. Analyzed endpoint intrusions in Microsoft Defender XDR. Managed client incidents and escalations through ServiceNow and Jira.
Investigated incidents and complex troubleshooting across AWS, Azure, Citrix and VMware, supporting thousands of users across Warner Bros. Discovery global brands. Automated repetitive incident-response tasks with Python and Tines. Collaborated with SOC and Engineering teams to align troubleshooting processes with security best practices. Authored technical documentation and knowledge-base articles. Tracked incidents and response workflows in ServiceNow. Maintained runbooks and participated in quarterly incident-response drills.
Certificates
AWS Solutions Architect
AWS2026