Open to opportunities

Vladut Lungu

@vladutlungu

PSIRT TPM & SME at Dell | Vulnerability lifecycle, CVE disclosure, cross-functional incident response | 3+ yrs product security | Remote via EOR

Romania

Message

What I'm looking for

I’m looking for a Senior/Lead Product Security, PSIRT, or Vulnerability Management role where I can own the vulnerability lifecycle, lead coordinated disclosure and CVE publication, and partner with Engineering, Legal, and Product to improve SLAs and security outcomes.

I'm a PSIRT Technical Program Manager with 3+ years of product security experience at Dell Technologies, where I work as a recognized Subject Matter Expert within the PSIRT organization.

My day-to-day is deeply operational: I triage inbound vulnerability notifications from major industry hardware and software vendors, manage the full Jira ticket lifecycle for each vulnerability, review and approve impact statements and remedy plans from engineering teams, and drive coordinated CVE disclosure through to public advisory publication. I lead cross-functional syncs with Product, Engineering, Legal, and Security teams to keep vulnerabilities moving toward resolution and SLA targets on track.

Beyond the operational work, I contribute as PSIRT SME on internal strategic projects — whenever a new initiative touches vulnerability management or disclosure obligations, I'm brought in to provide guidance and make sure PSIRT implications are covered from the start.

Before Dell, I spent several years at Basware in technical and security roles — enterprise software integration, B2B document exchange (XML, EDI, SQL), and customer-facing security assurance and RFP responses. That background gives me a technical foundation that most program managers in this space don't have, and it shows up in how I communicate with engineering teams.

I hold a GISF certification (valid through Sep 2028) and I'm based in Iași, Romania — fully remote, available for roles across EMEA and beyond via EOR employment contract.

What I'm looking for: a Senior or Lead role in PSIRT, Product Security, or Vulnerability Management at a company with an established or growing security function. I want to be somewhere I can contribute from day one and grow into more ownership over time — not just execute a checklist.

Tools: Jira · Confluence

Experience

Work history, roles, and key accomplishments

Current

PSIRT Technical Program Manager

Current

Dell Technologies

Feb 2024 - Present (2 years 4 months)

Owned end-to-end vulnerability lifecycle for Dell’s enterprise software portfolio, from intake and CVSS-based triage through remediation tracking and public advisory publication. Coordinated cross-functional incident response and maintained SLA compliance while managing Jira ticket workflows and PSIRT SME approvals.

PSIRT Vulnerability Management CVE Lifecycle CVSS Coordinated Disclosure Incident Response Jira Risk Communication SLA Cross Functional Stakeholder Management

Technical Program Manager

Dell Technologies

Sep 2023 - Feb 2024 (5 months)

Delivered security-focused technical programs aligned to product roadmap priorities, improving planning cadence, risk tracking, and cross-team coordination across concurrent security workstreams. Ensured alignment with internal security governance, audit requirements, and executive reporting standards.

Security Program Management Team Coordination Security Governance Audit Readiness Executive Reporting Process Improvement Stakeholder Management Dependency Management

Technical Consultant

Basware

Sep 2021 - Aug 2023 (1 year 11 months)

Designed and delivered B2B document exchange integrations on a Java-based platform using XML and EDI, translating customer requirements into production-grade workflows. Diagnosed and resolved critical integration production issues with R&D and Product while authoring customer deployment and release lifecycle documentation.

B2B Integration XML EDI Production Troubleshooting Workflow Design Technical Documentation Regex

L2 Support Consultant

Basware

Aug 2019 - Aug 2021 (2 years)

Provided second-line escalation for enterprise P2P system incidents, diagnosing and resolving configuration and integration failures using XML, SQL, and Splunk log analysis. Conducted root-cause analysis on recurring production issues and coordinated permanent fixes to prevent recurrence.

Root Cause Analysis XML SQL Splunk SLA Management Enterprise Systems

Security and Privacy Specialist

Basware

Dec 2018 - Jul 2019 (7 months)

Owned security and privacy content for customer-facing RFPs and security questionnaires, serving as an escalation point for complex or time-sensitive security assessment requests. Partnered with Sales, Product, Marketing, and Customer Support to improve response quality, consistency, and turnaround speed.

RFP Responses Security Questionnaires Security & Privacy Content Stakeholder Management Escalation Handling Response QA

Presales Security Specialist

Basware

Mar 2018 - Nov 2018 (8 months)

Supported international bid teams with RFP responses across technical, product, and security domains, maintaining the central RFP knowledge base across multiple regions. Owned and updated security knowledge to support consistent, high-quality bid submissions.

Pre Sales Security RFP Responses Technical Writing Product Security Security Domain Knowledge Base Management Regional Collaboration Documentation

VC & AV Support Analyst

Scc Services Romania

Jun 2013 - Feb 2018 (4 years 8 months)

Provided enterprise IT and AV conferencing support in SLA-driven environments, coordinating with vendors and internal teams to resolve incidents in a timely manner. Managed incident resolution workflows while ensuring service delivery under operational SLAs.

IT Service Desk Video Conferencing Support Vendor coordination Enterprise Support Operational Support Diagnostics Communication