Danijel Grah

Background

About Danijel Grah

Cybersecurity has been my focus for over a decade, with a specialization in offensive security and penetration testing for the past 7+ years. I currently lead a team of offensive security professionals and have developed a full-service offensive security capability within my organization covering red teaming, adversary simulation, and strategic security assessments. My approach balances deep technical execution with practical risk communication. I’ve worked across sectors including finance, SaaS, and industrial systems, helping clients identify and address real-world security threats. I value clear reporting, actionable insights and close collaboration with both technical and executive stakeholders. Outside of client delivery, I enjoy mentoring, building scalable methodologies, and contributing to the development of high-performing security teams. I’m particularly interested in how offensive security can be used not only for testing, but for driving broader security maturity within organizations. REFERENCES * CVE: Unquoted Path Vulnerability - SMB Login (CVE-2021-35231) * Hackerone bounty and credit received from: Yahoo, Ubiquiti Networks, IBM * Conference presentations (DEF CON, Workshop Wall of Sheep 2014, BSidesLV 2014, Hacktivity 2014, DeepSec 2014, Hackito Ergo Sum 2014, BalCCon2k16, Defcam 2015)* Security Research and Tools:**https[:]//github[.]com/rashimo/secaware/blob/main/MDE_Conditional_Privesc/MDE_Conditional_Privesc.md **https[:]//github[.]com/rashimo/ChCNN **https[:]//github[.]com/viris/android/tree/master/vaccine **https[:]//github[.]com/SigmaHQ/sigma/blob/master/tools/sigma/backends/csharp.py