Description

Vulnerability Management specialist with 6 years of experience in enterprise security environments. I specialize in Qualys VMDR, WAS, and CSAM, managing end-to-end scanning programs across internal and external infrastructure, driving remediation efforts, and delivering security metrics to global stakeholders.

My day-to-day work involves conducting vulnerability assessments using Qualys, Nmap, SSLscan, and SSL Labs, collaborating with System Owners and Security Officers across international teams, and ensuring compliance with PCI-DSS requirements. I also have hands-on experience with exposure management tools including BitSight and Shodan.

I hold CompTIA Security+ and CompTIA Linux+ certifications.

Currently open to remote full-time opportunities or consulting engagements in Vulnerability Management.

Industry field of expertise

Languages

English
Native or bilingual
Romanian
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

Worldline (via Atos and Eviden)
Cybersecurity Analyst — Vulnerability Management
March 2020 - Today (6 years and 5 months)
• • Led enterprise-wide vulnerability scanning operations using Qualys VMDR, WAS, and Cloud Scanning (AWS Connectors), Nmap, SSLscan, and SSL Labs across thousands of assets in multiple business units
• • Drove remediation efforts by prioritizing vulnerabilities based on risk and business impact, coordinating with System Owners, Security Officers, and global 1st/2nd line teams
• • Built and maintained security dashboards and executive reports providing visibility into security posture and KPIs for senior stakeholders
• • Managed external attack surface by identifying and resolving undocumented and orphan IP addresses using Whois, Shodan, and Nmap
• • Developed internal operational processes for scan requests, tool access management, IP escalations, and incident resolution
• • Integrated newly acquired IP scopes (Ingenico post-merger) into Worldline's security infrastructure
• • Onboarded and trained newly hired analysts, reducing team ramp-up time
• • Maintained PCI-DSS compliance requirements across relevant infrastructure scope Tools: QualysVMDR/WAS/CSAM,Nmap,SSLscan,SSLLabs,BitSight,Shodan,Whois,MicrosoftExcel
Qualys CSAM Vulnerability Management PCI-DSS
Huawei
Front Office Engineer / Service Desk Analyst
April 2017 - March 2020 (2 years and 11 months)
Timișoara, Romania
• • Managed network incident tickets for Vodafone Germany and coordinated field technician dispatches
• • Monitored network performance using Huawei and Ericsson systems with full SLA compliance
• • Provided 24/7 technical support to enterprise clients, handling escalations
Law Office 'Ionescu Mircea'
Legal Adviser
February 2010 - June 2015 (5 years and 4 months)
Deva, HD, Romania
• • Provided legal advisory services including drafting contracts, legal documents, and conducting legal research for clients