Andrei M.

Background

About Andrei M.

I specialize in understanding and applying cybersecurity architectures. This requires experience with physical networks, software engineering, enterprise governance, and a great amount of social skills. As a hobby I speak at cybersecurity conferences and program to experiment with the latest cybersecurity technologies. Sometimes I post my analysis on some of the Cybersecurity Standards and Legislation I work with at or create videos related to Cybersecurity on LinkedIn to engage with the community on important cybersecurity topics. Achievements in cybersecurity- Invited as speaker at the BSides Cybersecurity Conference - Designed and led Cybersecurity Architectures for nation-wide infrastructure projects - Established and led company-wide Cybersecurity strategies & Risk Assessment boards - Established and led Threat Modeling teams for application code and application infrastructure - Helped consolidate the supply chain cybersecurity for nation-wide infrastructure projects - Represented a CNA at MITRE US Achievements in programming- Integrated Identity Access Management solutions on premise and in cloud using Microsoft Azure - Designed and implemented an application layer Network protocol for distributed p2p communication (using Python / distributed hash tables & multiparty computation)- Designed and implemented the network infrastructure of a cryptocurrency mining farm with full serviceability and VPN monitoring - Designed and implemented a Secure Remote Physical Lock using LoRaWAN, FreeRTOS (real-time OS) and hardware Favourite sources of knowledge- SABSA - for app & network Cybersecurity Architecture - TOGAF - for network Cybersecurity Architecture - COBIT - for governance and management of enterprise IT - MITRE ATT & CK - For Threat Modelling - DORA - for Banking Cybersecurity best practices - ISO2700x - for OT/IT Cybersecurity best practices - IEC62443 - for OT Cybersecurity best practices - NIST SP 800 - for OT/IT Cybersecurity best practices - NERC-CIP - for OT Cybersecurity best practices - GDPR - for personal information best practices