Open to opportunities

Andreea Stoica

@andreeastoica

Message

I test web applications and AI agents for exploitable vulnerabilities using hands-on lab research.

Romania

Message

What I'm looking for

I'm looking for an entry-level security role where I can apply hands-on web application and AI/LLM security testing, deepen my vulnerability research skills, and learn from experienced security professionals.

I've completed hands-on security research training through PortSwigger Web Security Academy, exploiting web and LLM attack labs involving indirect prompt injection, LLM API exploitation, AI agent manipulation, SQL injection, XSS, and CSRF.

I build practical security tooling, including a Bash network reconnaissance script that combines ICMP host discovery with Nmap service scanning and structured reports, plus a Python port scanner with automated banner grabbing. My work is grounded in Linux, TCP/IP, HTTP/S, DNS, Bash, Python, Kali Linux, Burp Suite, Metasploit, Wireshark, and vulnerability research focused on root-cause mechanisms.

Experience

Work history, roles, and key accomplishments

Junior Security Researcher

Self Employed

Entry-level security researcher with self-directed, hands-on training across web application security and AI/LLM security. Comfortable identifying and exploiting vulnerabilities in controlled lab environments from SQL injection and SSRF to prompt injection and AI agent exploitation.