Position: Security Engineer
Category: Security
English level: fluent
Years of experience: 5


April 2022 -
Present
Application Security Engineer, Meta, London.
{ Part of Meta’s Product Security team. Working with engineers for developing secure
applications / new features.
{ Conducting security code reviews and writing detailed reports on my findings. Working
with stakeholders for addressing vulnerabilities.
{ Writing code to improve the internal security-related tools: automatic vulnerabilities
detection, fuzzing native code, static code analysis.
July 2020 -
April 2022
Application Security Engineer, eMAG, Bucharest.
{ Enforcing the security of the eMAG’s public domains and internal apps by performing weekly security reviews. Working with engineering teams for developing secure
applications.
{ Developed a fake order detection system that automatically traces down malicious orders.
More than 1000 orders were classified this way without the previous manual work.
{ Assessing the security of eMAG’s Android app. Because of this, the API endpoints are
20% more secure.
{ Working with automated scanners such as: RIPS, Nessus, Acunetix, Qualys.
June 2021 -
September
2021
Application Security Engineer, Facebook, London, Internship.
{ Part of Facebook’s Product Security team. Working with engineers for developing secure
applications / new features.
{ Writing code to improve the internal security-related tools: automatic vulnerabilities
detection, fuzzing native code, static code analysis.
March 2019 -
July 2020
Security Engineer, Bitdefender, Bucharest.
{ Responsible for enforcing the security of internal and external assets by conducting
periodical pentesting operations. I was able to find 2 critical internal vulnerabilities that
had an impact on all employees.
{ I managed the vulnerabilities reported via the Bitdefender bug-bounty program. Because
of my work, the average validation time was lowered to 3 days from 4 days.
{ I monitored the network traffic within the company by setting up alerts in Splunk on the
logs provided by Palo Alto and other internal tools. Because of this, 1 C&C traffic was
spotted and the communicating laptop proved to be infected with malware.

2017 - 2019
Software Engineer, Bitdefender, Bucharest.