Looking for a job

emanuel cotaj

@emanuelcotaj

Penetration tester and security consultant specializing in network, web app, and critical infrastructure security. CISSP, OSCP.

Albania

Message

At Guident Corp, I led an authorized penetration test of a production autonomous vehicle network that identified a CVSS 10.0 remote code execution vulnerability and critical authentication and credential-exposure findings, all remediated after disclosure.

I build security into autonomous vehicle, cloud, and critical infrastructure environments through penetration testing, threat modeling with STRIDE and PASTA, and ISO/IEC 27001 audit preparation. I also produce formal reports using CVSSv3, CWE, and ISO/SAE 21434 risk framing for executive and engineering teams.

Previously at Albania's National Cyber Security Authority, I performed red team engagements, national SOC monitoring, threat hunting, and DFIR investigations of confirmed breaches. I'm CISSP and OSCP certified, with NATO and EU security clearances.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester / Security Consultant

Current

Guident Corp

Jan 2026 - Present (8 months)

Led an authorized penetration test of a production autonomous vehicle network, identifying critical vulnerabilities including a CVSS 10.0 remote code execution. Performed cloud penetration testing, contributed to ISO/IEC 27001 audit preparation, and conducted threat modeling using STRIDE and PASTA.

Penetration Testing Autonomous Vehicle Security Cloud Security ISO 27001 Threat Modeling STRIDE Model PASTA CVSS CWE ISO 21434

Penetration Tester, Red Team

National Cyber Security Authority

Jan 2024 - Jan 2026 (2 years)

Performed network and vulnerability scanning across critical government infrastructure using Kali Linux, Nmap NSE, Netcat, and Nessus. Conducted OSINT investigations and simulated real-world attacks to validate detection coverage and response time of the national SOC team.

Penetration Testing Red Teaming Vulnerability Assessment Kali Linux Nmap NSE Netcat Nessus Attack Surface Management Shodan OSINT Maltego

Cybersecurity Analyst, SOC Tier 1/2

National Cyber Security Authority

Jan 2023 - Jan 2024 (1 year)

Provided 24/7 log monitoring and event correlation across a national SIEM deployment, supporting real-time detection and response for government-sector incidents. Produced IOC/IOA reports and supported incident-response lifecycle on confirmed intrusions.