Dec 2021 – Apr 2025 · 3 yrs 4 mos · Cracow, Małopolskie, Poland

• Specialised in red-team physical security assessments and physical access control solutions, simulating real-world attacks to test organisational defences.
• Managed complex web application security audits.
• Acted as client contact, leading project scoping and basic threat modelling meetings, presenting findings to stakeholders, and providing tailored remediation strategies.

Jun 2021 – Dec 2021 · 6 mos · Cracow, Małopolskie, Poland

• Conducted security assessments for IoT devices, focusing on firmware analysis, communication protocol testing, and hardware exploitation techniques.
• Performed Kubernetes security audits, ensuring containerized environments adhered to best practices for access control, network segmentation, and workload isolation.
• Conducted security audits and source code reviews to identify logic flaws and insecure implementations in enterprise and internet banking applications.
• Collaborated with clients to implement security measures based on assessment findings, improving overall system resilience.

Mar 2019 – May 2021 · 2 yrs 2 mos · Cracow, Małopolskie, Poland

• Conducted security assessments of web applications, focusing on common OWASP Top 10 vulnerabilities and secure development practices.
• Performed embedded hardware security reviewes, including protocol analysis and security code reviews for IoT devices.
• Assisted in the development of client-specific security recommendations and remediation strategies.

Jun 2016 – Feb 2019 · 2 yrs 8 mos · Kraków, Mazowieckie, Poland

• Standardised infrastructure by migrating to Ansible-provisioned CentOS on XenServer, rebuilding the entire system in a highly available configuration.
• Tuned Postfix for handling large email volumes, optimising in-house delivery and queue management solutions.
• Introduced and maintained Prometheus for monitoring, FreeIPA for identity management, and Bareos (Bacula) for backup solutions.
• Unified development and production environments using Vagrant, promoting consistency across workflows.
• Led the data acquisition team, developing solutions in Python and Ruby with Kafka and the ELK stack for log and event processing, improving overall visibility and supporting Big Data team and company transition to data-driven approach.
• Contributed to platform security by performing code and infrastructure security reviews.

Sep 2014 – May 2016 · 1 yr 8 mos · Cracow, Małopolskie, Poland

• Provided ongoing support to software development teams by configuring and maintaining robust CI/CD pipelines.
• Planned and implemented a distributed IoT infrastructure, including the deployment of a virtualization platform for local edge server appliance.
• Designed, developed, and deployed an AVR embedded hardware solution for low-level industrial line monitoring, contributing to the in-house Manufacturing Execution System (MES) by providing real-time data collection platform.
• Did some kernel-level hacking for Yocto builds on Intel Edison platform.

Jan 2014 – Aug 2014 · 7 mos

• Maintained and optimized the platform's LAMP stack hosting infrastructure based on LXC containers to ensure high availability and performance for millions of users worldwide.
• Collaborated with cross-functional teams to implement scalable solutions.
• Maintained Heartbeat and BIRD high availability cluster routing and failover solution.
• Developed automatic node deployment system based on DEB packages.

Mar 2013 – Jan 2014 · 10 mos

• Debian GNU\Linux machines administration in containerized environment (LXC).
• Maintenance of Nagios-based monitoring of the LAMP stack.

Jul 2013 – Jul 2013 · 0 mo · Budapest · On-site

• Secured internship position through EPAM's "Java Runs Very Fast" coding competition.
• Developed enterprise applications using Java Spring Boot.
• Planned and deployed LXC-containerized infrastructure for running acceptance tests based on Selenium, Jmeter and VisualVM.

Jul 2011 – Dec 2012 · 1 yr 5 mos · Zielonki, Małopolskie, Poland · On-site

• Deployed and maintained Debian GNU/Linux systems in virtualized environments using VMware ESXi and OpenVZ.
• Managed Asterisk PBX systems for an outbound call center, ensuring reliable VoIP operations (VPN, E1).
• Deployed and maintained WAN networks utilizing Cisco IOS and Vyatta.
• Implemented distributed network and service monitoring with Check MK and Nagios.
• Set up hosting infrastructure (DirectAdmin) and billing systems (WHMCS).
• Developed a Magento e-commerce add-on for supplier price comparison and stock control using PHP and Zend Framework.

Sep 2008 – Jun 2011 · 2 yrs 9 mos · Cracow, Małopolskie, Poland · On-site

• Designed, deployed, and maintained hybrid network infrastructure using Cisco Catalyst switches (CatOS/IOS) and virtualized Vyatta routers for VPN, NAT, and WAN routing.
• Managed virtualized environments (OpenVZ containers, VirtualBox VMs) running Ubuntu/Fedora, including service configuration for SAMBA3, LDAP, Kerberos, DNS (BIND9), web servers (Apache/Nginx), and MySQL.
• Developed custom plugins and resolved bugs for Observium SNMP network monitoring system to enhance visibility across active infrastructure.

Apr 2005 – Feb 2009 · 3 yrs 10 mos

• Project owner of web browser-based MMORPG game inspired by J.R.R. Tolkien’s
• books reaching in peak over 3 thousand active players and 100 online
• LAMP servers administrator