Kris Barcewicz

Founded a boutique product security consultancy specializing in PSIRT operations, Secure SDLC implementation, and EU regulatory compliance (CRA, NIS2), serving hardware and IoT manufacturers preparing for mandatory vulnerability reporting obligations starting September 2026. • Built and launched VIGILO (vigilo.me), a SaaS PSIRT case management platform featuring CVSS 4.0 scoring, CRA Article 14 regulatory timers, CSAF-compliant reporting, multi-tenant architecture, and integrated metrics dashboards — developed end-to-end on Next.js, Supabase, and Vercel. • Deployed a suite of 13 compliance tools at app.tridentsec.eu including a 22-question CRA Readiness self-assessment, CVD Policy Generator, and SBOM tooling — serving as a lead generation engine and product demo layer. • Designed PSIRT and Secure SDLC maturity frameworks including a 6-domain Quick Scan, 10-domain Full Assessment, CRA/NIS2 readiness audits, and the proprietary "Abuser Story" threat modeling methodology for agile engineering teams. • Developed a professional training portfolio of 9 workshops covering PSIRT operations, CRA readiness for engineers, executive incident response simulations, secure SDLC, SBOM/supply chain security, and threat modeling — delivered as 1–3 day intensive programs. • Offer fractional security leadership as interim PSIRT Lead and Secure SDLC Lead for companies requiring CRA-compliant vulnerability response programs without dedicated security engineering headcount.

https://deeptrend.com As an Independent Deep Learning Researcher at DeepTrend.me, I focused on developing innovative stock price prediction models. By leveraging advanced techniques such as LSTM, GRU, and CNN, I aimed to improve predictive accuracy. My work included integrating sentiment analysis to refine model performance, achieving significant results in accuracy and error metrics. Front web techno: #React, #Node.js, @tailwind css, #TypeScript

• Built and led cross-functional engineering teams from scratch across Poland and Ukraine, scaling to 20+ developers &QA • Acted as Single-Threaded Owner (STO) for Amazon Sidewalk IoT platform productization • Co-owned Ring's Line Powered Device (LPD) software line covering all camera and doorbell products • Defined platform strategy, architecture, and delivery processes for secure, scalable Ring services • Collaborated with embedded, application, and cloud engineering teams to implement high-security, high-availability IoT solutions • Managed program delivery ensuring scope, schedule, and cost targets while maintaining continuous improvement initiatives

• Founded and operated security technology startup with full P&L responsibility • Built and managed team of ~12 engineers and business professionals • Developed CBOX™ hardware product featuring machine learning-based secure voice communication technology (Demo: https://www.youtube.com/watch?v=stglEbifWOY, https://www.youtube.com/watch?v=4AVHS3NZ5Sc) • Led complete product lifecycle: hardware/software architecture, secure boot, cryptographic protocols, signing infrastructure, key management • Prepared product for international security certifications (ANSSI-CSPN, EAL+, FIPS 140-2) • Managed sales, marketing, and strategic partnerships across EMEA region • Established development processes and quality standards for hardware security products

http://www.incubateurpacaest.org/

Ensured Technical Project Management for Nokia 3G+ broadband modem project (Cs1x & Cs2x family modems)

Mission in France Telecom Research and Development in radio access department (Paris / Issy-les-Moulineaux)

GSM/GPRS/EDGE validation and integration (IOT tests)

Verifications and Interoperability tests (IOT) of GSM/GPRS (2G/2.5G) handsets of different company (RLC/MAC level on the Abisgsm/Abisgprs interfaces) and Gb interfaces.