Experience
Download CV (PDF)Ten years across global SOC operations, Swiss banking and Web3. I run incidents end to end, build SIEM and detection platforms, and lately put AI agents to work on phishing and alert triage.
career
DFINITY Foundation
2022 – 2026Senior Infrastructure Security Engineer · Zürich, Switzerland
- Responded to security incidents end-to-end, including forensic analysis, postmortems, and stakeholder presentations.
- Designed and built a technically deep Elastic SIEM platform with custom detection rules covering a wide range of applications and threat vectors.
- Deployed AI agents for phishing classification and for SIEM alert throttling and triage.
- Maintained IAM permissions and access control for AWS infrastructure, including Okta (SAML) integrations, and contributed to release-pipeline hardening.
Credit Suisse (contractor via iET SA)
2021 – 2022Security Engineer · Zürich, Switzerland
- Designed and implemented end-to-end technical solutions for security and business use cases using Splunk and commercial UEBA tools.
- Built parsers, data models, correlation rules, Splunk searches, and dashboards.
ISPIN AG
2018 – 2021Professional Threat Responder · Bassersdorf, Zürich area, Switzerland
- Built a threat intelligence platform gathering, processing, and correlating TI data for distribution into SIEM/EDR solutions.
- Built and maintained high-throughput Elasticsearch clusters (40+ nodes, 50 TB+ bare metal).
- Developed a phishing framework and ran high-profile phishing campaigns for major Swiss financial organizations.
- Built the Cyber Defense Center from scratch, recruiting team members and providing mentorship.
Akamai Technologies
2015 – 2018Senior SOC Specialist · Cracow, Poland
- Lead DDoS mitigation expert and escalation point for the global Security Operations Center.
- Detected DDoS attack vectors through deep packet analysis and developed mitigation policies for emerging threats.
- Built the Cracow SOC from scratch: recruiting, training material, and technical documentation.
Cisco Systems
2015CMS Network Engineer · Cracow, Poland
- Full-cycle configuration and administration of Cisco equipment in mission-critical infrastructures.
- Advanced troubleshooting and diagnostics on Cisco routers; incident management per ITIL/ISO procedures.
Atos IT Solutions and Services
2013 – 20153rd Line Network Engineer · Bydgoszcz, Poland
- Provided 3rd-line LAN/WLAN support for wireless infrastructure (802.11 a/b/g/n) with Enterasys and Cisco controllers.
- Configured BGP, OSPF, HSRP, VRRP, ACLs, static routing, and EtherChannels.
SpeedNet
2011 – 2013Field Engineer · Ropczyce, Poland
- Wireless installations using climbing equipment on buildings and structures.
- Full-cycle 802.11a/b/g point-to-point implementations in the 2.4 and 5 GHz bands.
education
University of Rzeszów, Poland
2009 – 2013Bachelor's degree, Technical Information and Education
- Received scientific scholarships.
- Erasmus exchange at Matej Bel University, Banská Bystrica, Slovakia; MOST exchange at Kazimierz Wielki University, Bydgoszcz, Poland.
skills
Security Engineering
- Incident Response
- Detection Engineering
- SIEM (Elastic, Splunk)
- EDR (CrowdStrike)
- Threat Intelligence
- Threat Hunting
- DDoS Mitigation
- Malware Analysis
- Phishing Defense
Cloud & Infrastructure
- AWS
- GCP
- IAM / Okta
- Kubernetes
- Docker
- Terraform
- Ansible
- Linux
- CI/CD Security
- Elasticsearch
Automation & AI
- Python
- Bash
- AI Agents
- LLM Alert Triage
Languages
- Polish – native
- English – fluent
- German – B1 (learning)