Andrei-Marian Buzoianu

– Assigned to the EU Cybersecurity Regulation implementation project. – Established and evolved the Application Security Architecture area as part of the Enterprise Architecture for new and existing applications in the highly regulated environment of the GSC to ensure compliance with the EU Cybersecurity Regulation. – Translated regulation requirements into actionable and technical implementation steps. – Designed technical documentation and processes for DevSecOps pipelines. – Developed automation to execute static analysis (SAST, SCA) scans on 50+ source code repositories across the application landscape which led to the identification and remediation of code scanning flaws (OWASP Top 10), vulnerable OSS dependencies (CVEs), hardcoded secrets and IaC misconfigurations. – Enhanced SSDLC by leading the integration of static analysis tools across the organization's delivery pipeline for a seamless DevSecOps workflow (Shift-Left strategy) which ensured identification of critical security flaws early during the build phase of the application. – Deployed DAST scanner and automated regular scans in CI/CD to scan the web applications for vulnerabilities post-deployment to the STAG environment. – Designed and configured Security Gates for both static and dynamic scanning which ensured applications containing critical security flaws are not released to PROD. – Managed the end-to-end vulnerability lifecycle, including reviewing and prioritizing findings from various security tools and coordinating remediation efforts with both technical and non-technical stakeholders (development team, project managers). Configured and maintained DefectDojo as the central security orchestration and vulnerability management platform.

– Secured cloud-native NOS product based on Docker containers; conducted code reviews, configuration reviews, and direct misconfiguration fixes. – Discovered vulnerabilities through code analysis and manual testing (directory traversal, command injection, privilege escalation, insecure defaults) and coordinated remediation. – Designed and implemented DevSecOps practices, by setting up secure Artifactory repositories and integrating scanning tools into CI/CD pipelines. – Developed and maintained Jenkins jobs automating SAST/SCA scans and package upgrades. – Hardened services (SSH, Docker) following CIS Benchmarks; mitigated DoS by enforcing container resource limits. – Conducted AWS environment security assessments with Wiz and manual validation. – Authored technical documentation and security blogs in Confluence.

– Reviewed SAST/SCA results (Snyk, SonarQube) and prioritized fixes. – Performed DAST scans with Burp Suite, evaluated new security tools for SSDLC. – Conducted secure code reviews for client applications.

– Researched attacker persistence techniques on Linux, Windows, and MacOS. – Built MITRE ATT&CK-based atomic tests for Threat Simulator (Breach & Attack Simulation). – Performed malware analysis with Cuckoo Sandbox; developed detection signatures (Suricata, Cuckoo, Win32 API hooks). – Enhanced malware sandbox reporting with new modules. – Monitored honeypots and created detection rules; worked with Splunk and Elastic Security suite to identify real-world exploits.