Nickname: marcinguy
Country: Global. Published Security Expert and Researcher. Vulnerabilites and exploit collector. SAST, DAST, DevSecOps expert.

Vast experience in IT, IT Security (InfoSec), Information Security, Cybersecurity, Compliance (PCI DSS, GDPR, CCPA), ISO 27000 series, ISO 22301, SOC 2, BCP, DR, Governance, agile methodologies, project management, both in startups and corporate environments.

Past accomplishments (measurable & non-measurable):
- USA & global work experience - Leading and kick-off of global organizations IT Security Programmes
- Leading and managing of small, cross-functional teams
- Secured global hundreds of offices, in several dozen of countries with a total of several USD billion in revenue
- Secured and managed several ten thousand of network and security devices
- Secured several dozen of software solutions
- Secured Global system, data centers and systems
- Teamlead of Open Source project - "Powerfuzzer" (part of Kali Linux, 40,000+ downloads, millions via Kali Linux)
- Open Source core contributor to NAXSI Web Application Firewall Project (3,000+ stars project)
- Published Expert on Web Application Security ("Powerfuzzer" in "Securing PHP Web Applications" by Tricia Ballad, William Ballad Addison-Wesley Professional)
- Author of several publications and blogs entries
- CVE author (founding previously unknown security issues)
- CTF (Capture the Flag) io, io64, ioarm: ARMv7, Pwnable, websec
- BlackHat 2022 Speaker, BlackHat 2022 Cyberseed finalist, Microsoft Reactor speaker, Security Open Summit Speaker
- Holder of dozen of Computer Networks & Systems, Security and Programming Certifications


Twitter: @marcinguy

GitHub: https://github.com/marcinguy/


Additional Keywords: AWS, Cloud Architecture, Cloud Infrastructure, Security & Cloud Auditing, IAM, ISO, NIST, CSF, CIS, OWASP, GDPR, SOC2, PCI-DSS, Vulnerability Scanning & Risk Management, Threat Hunting & Intelligence, DevOps, DevSecOps, Kafka, Kubernetes, Programming languages


Social: LinkedIn X