Alexandru Vaida Email & Phone Number

New York, Ny, Us

• Product Security Lead & Engineering Manager for the UiPath Platform• Threat Modelling and Security Design Reviews• Secure Code Review of core UiPath components & features• CI/CD pipeline security support & tool implementation (SCA, SAST, etc.)• SDLC definition & Scanning strategy improvements in line with DevSecOps practices• Vulnerability management & CVE triage• External Pentest & Bug Bounty program monitoring

New York, Ny, Us

• Web application penetration testing of UiPath core products• Secure code review and white box testing of new components and features• SDLC security and operations• Static Vulnerability Analysis of web and non-web components• Architecture reviews and release readiness security assessments• Security Tools Automation• Bug Bounty program support

Gb

Gb

Certifications:• OSWE - Offensive Security Web Expert• OSCE - Offensive Security Certified Expert• OSCP - Offensive Security Certified Professional• CREST Registered Penetration TesterResponsibilities:• Lead the Red Team function of the PwC Romania penetration testing practice.• Develop the Red Team tooling, methodology and tactics• Build the underlying infrastructure including: C2 servers, mail servers and a phishingplatform• Cobalt Strike payload development, malleable profile design and VBA macro delivery• Delivering end-to-end engagements, managing client relations and providing recommendations• Training and managing junior members of the team on Red Team tactics and operations• Internal and external infrastructure penetration testing• Web application testing, including Java, .NET and VBA code review.• Social engineering scripts and tools development• Phishing campaign design and buildProjects:• Pentest reporting tool - Built a custom reporting tool to manage test findings and facilitate efficient deliveryof penetration testing engagements. The tool reduces the manual report writing effort by parsing output files oftools such as Burp and Nessus and integrating these into PwC custom reports.• Shellcode development - Undertaking research in shellcode development techniques for evading sandboxing,EDR and anti-virus solutions. Developed a custom malware in x86 assembly, designed to communicate over anencrypted DNS channel with a python C2 server.

Gb

Responsibilities:• Red team engagements• Malware development• Infrastructure testing• Web application testing

Redmond, Washington, Us

Responsibilities:• Manage and support the scoping and build of key event sites and features for the MSN online portal.• Troubleshoot issues to ensure the successful delivery of articles and galleries to 45 markets.• Communicate with the offshore team for site builds and content share support. Effectively manage offshore resource task prioritisation.• Set up and maintain a SharePoint site to manage the team’s editorial workflow. Identify new requirements and support any issues that editors or markets might encounter.Achievements:• Year in Review - Led and launched this MSN End of Year project, closely working with the editorial teams in international markets and various stakeholders throughout the project life-cycle. The site generated a total of 150 Million Page views globally. Key actions: o Collaborated with Bing in order to deliver the product on time, to meet their goals and KPIs and align with our Year in Review product. o Coordinated market requirements and feedback and provided them with a project scope and content plan. Worked with The User Experience team to acquire design assets. Raised a Purchase Order with the offshore team to support our site build and content delivery. o Handed over a complete product to 43 markets that they can start promoting immediately. o Assessed the project’s performance by pulling site metrics reports on page views and unique users and analysed feedback from markets.• Maintained a constant communication stream with markets for live events site support (such as Fashion Weeks, Year in Review, Winter Olympics and World Cup) or general content share.• Successfully collaborated with the offshore team to plan and schedule tasks for site builds and live content share issues, considering the time zone difference. Established and organized a task prioritisation workflow in SharePoint in order to increase efficiency and issue resolution time.

Birmingham, West Midlands, Gb

Responsibilities:• Teaching first year students Java programming skills.• Providing advice and support to other students.• Observing and delivering constructive feedback.• Motivating students and persuading them about the importance of learning a programming language.Achievements:• Improved my organizational skills in a very busy environment and developed the ability to work under pressure by dealing with multiple students in a limited time period.• Consolidated my pedagogical skills by constantly working with other people, dealing with their requests in a pleasant, positive manner and helping them gain a better understanding of the subject.

Paris, France, Fr

Responsibilities: • One-week internship in an IT, Consulting and Outsourcing company, during which I have worked within a team of 5 members to provide business solutions for the Cruse Bereavement Care charity.• Had the opportunity to interact with the client and develop my problem-solving skills and presentation skills in a professional environment. Achievements:• Collaborated with the client to develop a project plan that increased fundraising and encouraged more volunteers to get involved.• Produced a budget plan and a schedule describing the events and the timeline leading up to them.• Established an advertising strategy to raise awareness of the charity and improve their public image.• Conducted market research to better understand our target audience.• Provided a design for the company’s annual post card and contacted several large retailers to sell the postcard across the UK.• Presented the project in front of a large audience and jury.

Master’S Degree, Secure Software Systems

Bachelor'S Degree, Computer Science And Business Management

Education record