Looking for a job

Krzysztof Marciniak

@krzysztofmarciniak

Message

Security Engineer at Przelewy24, developing internal security tooling and threat modelling systems.

Poland

Message

At Przelewy24, I perform security assessments, develop internal tooling, and help increase security awareness among developers. I also handle external security reports, monitor vulnerabilities, and set up and tune security pipelines for internal projects.

My work spans security research and consulting, including application assessments, penetration testing, threat modelling, and secure design support. I enjoy learning and sharing knowledge to raise awareness and extend security capabilities.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

Przelewy24

Dec 2024 - Present (1 year 11 months)

Performing Security Assessments, Developing internal tooling and increasing security awareness among developers. Handling external security reports, monitoring vulnerabilities in projects and setting up and tweaking security pipelines for internal projects. Moreover, threat modelling and managing the Security Champions programme.

Security Researcher

Argus Cyber Security Ltd.

Jan 2024 - Aug 2024 (7 months)

Worked as Security Researcher at Argus Cyber Security Ltd..

Associate Vulnerability Researcher

Interrupt Labs

Jul 2023 - Sep 2023 (2 months)

Searching for security vulnerabilities in given (external) applications. Assessing the attack surface of applications, source code review and dynamic debugging of applications using GDB.

Security Researcher

WithSecure

Dec 2020 - Jul 2023 (2 years 7 months)

Supporting development teams by helping them design applications in a secure manner, preparing and holding external detection & response trainings, performing penetration tests for the internal customer.

Cyber Security Consultant

F-Secure Corporation

May 2019 - Dec 2020 (1 year 7 months)

Performing security assessments of web applications as well as penetration tests against infrastructures, code reviews, threat modellings, hardware security research (including the KeyWe smart lock), host reviews, leading security assessments off- and on-site.

Junior Security Consultant

F-Secure Corporation

Feb 2018 - May 2019 (1 year 3 months)

Worked as Junior Security Consultant at F-Secure Corporation.

Python Developer

F-Secure Corporation

Jan 2016 - Jan 2018 (2 years)

Worked as Python Developer at F-Secure Corporation.

Backend Developer

Apptension

Jan 2015 - Dec 2015 (11 months)

Python web application developer, mostly in Django but with redis, celery, requests etc. as well. Also responsible for server administration and maintenance (Debian GNU/Linux).

Intern

Samsung Electronics

Jul 2013 - Sep 2013 (2 months)

STB (Set Top Box) application developer, low-level C programming as well as C++ development. Dealing with embedded systems, library cross-compilation and rendering objects on the TV screen.