Computer scientist and security architect with over 10 years in the field. I work where offensive security, applied research and teaching meet: breaking systems to understand them, publishing what I find, and training the next generation of security engineers.
Great architecture is built twice: first in the minds of those you convince, then in the world.
I worked my way up from intern and junior engineer to lead security architect and security leader. My niche is to combine the scientific and engineering sides of computing and security while pushing both forward.
I teach BSc and MSc courses in computer science and cybersecurity at Eötvös Loránd University. My subjects are partially based on my own research group's findings with with over 9 published articles, 150+ citations before earning my PhD.
I take part in ethical hacking and hold several certifications including OSCP+. I have hacked 1,000+ machines in my career and have a database of hundreads of exploits. I am ranked in the top 5000 hackers by OffSec.
OSCP-certified ethical hacker. I attack systems to find what defenders miss and turn the findings into architecture.
PhD research at ELTE on LLMs and security: vulnerability detection, forensics benchmarks and information leakage.
Cybersecurity, cryptography and supply chain security courses for BSc and MSc students.
Recent peer-reviewed work at the intersection of offensive security and large language models. See Google Scholar for the full, up-to-date list.
Courses at Eötvös Loránd University, covering the foundations through to the attacks that make the news. Select a course for details.
Lead Security Architect of Central Architecture & Analytics. I oversee the development and architecture of 16+ teams building B2B and B2C applications, own top-down security solutions across the organization, and mentor and oversee a group of security engineers.
Maintained and expanded the security infrastructure of a massive AWS cloud estate with a small team: legacy systems, production troubleshooting, custom tooling and incident response, with a focus on developer access to cloud systems and the underlying AWS platforms.
As Technical Lead I owned 11 security tools and services, from log shipping, parsing and storage to internal access, monitoring, and network and application security. After being promoted to a technical lead I managed stakeholders and outside contacts, supported other teams with research and reviews, and mentored new security engineering and analyst hires.
Built technology to virtualize legacy C++ systems and optimize resource management for demanding medical applications using Docker, Linux and custom tooling to port monolithic systems to server-based architectures. The work produced world-first proofs of concept and started a wider move toward server-based medical architecture.
As a security engineer, designed secure and efficient communication models for the newest generation of service-based medical applications. Those principles remain the baseline of the finished products. I was part of the commission to develop the next generation of medical imaging software.
Taught Computer Security and Computer Networking lectures and practicals to post-secondary students, and supervised and evaluated English technical oral exams.
Built highly customized websites, webshops and internal management systems for 15+ companies. Led teams of 2-8 developers through acquisition, planning, development and maintenance.
I write on Medium about security research, incidents and engineering. The latest posts load from the feed.
Research published by Usenix reveals widespread credentials leakage in preprint archives As researchers, we always race to be the first to publish in any topic. Having the ability…
The known case of: “I tested everything.” This story happened in the first few months of joining Prezi as a security engineer. Maybe it’ll be helpful for you as a warning or as…
Leverage the Internationalization API Browsers are the main point of connection between users and their services. It’s no surprise then that a considerable effort is going towards…
Apple introduced the touch bar in 2016 for their Pro line of laptops, giving their users a futuristic vision of what computer controls could look like. This, however, quickly…
Software development is a rapidly expanding field, with new languages, applications, frameworks, and technologies popping up day by day. With such an extensive list of tools to…
Small browser-only tools and experiments. All open source.
Data conversion and hashing for hex, bin, base64 and other common formats.
Research collaboration, speaking, teaching or security architecture: get in touch through any of these.
message me on LinkedIn