Open to opportunities

Yiannis Kapsalis

@yianniskapsalis

Message

Security director with deep product, application and cloud-native security leadership experience.

Greece

Message

What I'm looking for

I seek a leadership role where I can build and scale security programs, collaborate with product and engineering, and enable secure, compliant product delivery.

I am a resourceful information security leader with 12 years of experience building and running product, application, and infrastructure security programs for cloud-native organizations.

As Security Director, I established and delivered company-wide security roadmaps, collaborated with C-level executives, and ensured compliance with European and global information security and Trust & Safety regulations.

I have built and led security teams from the ground up, introduced product security features, implemented SSDLC and secure code training, deployed SAST, EDR and SIEM, and coordinated vulnerability management and bug bounty programs.

I prioritize creating trusting relationships with teams, enabling high-quality product delivery, fostering innovation, and focusing on practical, risk-based security that aligns with business goals.

Experience

Work history, roles, and key accomplishments

Security Director

WeTransfer

Sep 2023 - Dec 2024 (1 year 3 months)

Established and delivered the company-wide security program and roadmap, advising C-level stakeholders and guiding investments to ensure compliance with European and global information security and Trust & Safety regulations while integrating security into product development.

Security Strategy Product Security AWS Security Vulnerability Management SSDLC Stakeholder Management

IT Security Lead – Senior Engineering Manager

WeTransfer

Jan 2021 - Aug 2023 (2 years 7 months)

Built and led an 8-person security organization covering Product, Application, Infrastructure security, GRC and Trust & Safety; implemented SAST, EDR, SIEM, enhanced AWS security, launched bug bounty and drove ISO27001 certification.

Team Leadership SAST EDR SIEM AWS Vulnerability Management SSDLC ISO 27001)Bug Bounty

Lead Application Security Engineer

WeTransfer

Jan 2020 - Dec 2020 (11 months)

Focused on product security, penetration testing, and vulnerability management for all products, driving remediation and secure development practices across engineering teams.

Application Security Penetration Testing Vulnerability Management Secure Coding Threat Modeling SDLC

Senior Security Consultant

ForConsult

Jan 2016 - Dec 2019 (3 years 11 months)

Delivered a wide range of security projects including web/mobile application, network and infrastructure penetration testing, red teaming, and architecture/code reviews for clients as part of NCC Group engagements.

Penetration Testing Red Team Architecture Reviews Code Review Mobile Security Network Security

Junior Consultant

NNIT

Sep 2014 - Dec 2015 (1 year 3 months)

Completed graduate program rotations across Network Operations, Security Operations, Operations Architecture and Penetration Testing, contributing to operational and security functions.

Network Operations Security Operations Penetration Testing Incident Response

Penetration Tester

SB Research

Jan 2014 - May 2014 (4 months)

Member of a research team focused on penetration testing methodologies and combinatorial mathematics applied to security assessments and vulnerability discovery.

Penetration Testing Research Vulnerability Discovery Exploit Development Security Methodologies