Czabán Tamás

I build security automation that cuts response time from hours to minutes, and I apply the same discipline to both internal vulnerability operations and public open vulnerability data. At Citi, I run vulnerability management end-to-end—covering triage, investigation, remediation tracking, and incident response on L0 GEM deadlines—while shipping the Python tooling the team uses daily.

I track vulnerabilities through closure across the enterprise asset estate and communicate risk findings to engineers and director-level stakeholders. I lead incident response when the clock is on, like parsing affected app versions with Python automation and clearing a 48-hour deadline without chase emails.

I focus heavily on operational impact: I built an automated per-app-manager Email Composer during an Apache Tika XXE L0 GEM and an Oracle HTTP Server RCE L0 GEM, replacing manual workflows (~4 hours) with a 12-minute pipeline. I also deliver data products such as the Firewall & Load Balancer Vulnerability Dashboard and the GEM Dashboard, using efficient caching and filter-aware reporting so daily operational view stays sharp.

Beyond incident execution, I ship maintainable pipelines to production environments—containerized Python/Streamlit workloads on OpenShift, wired into GitHub Actions and a Tekton pipeline with supply-chain gates. I’m energized by open-source-rooted collaboration, and I build public tools like CVE Feed Dashboard, Vulnerability Prioritization Scorer, and Advisory Composer that connect NVD API v2, EPSS, CISA KEV, and OSV.dev to help teams prioritize and act.