George Adrian Munteanu

Background

About George Adrian Munteanu

I'm a Computer Science Engineer, with particular interest in the Security branch. Short version: I love designing and implementing software, with security in mind. I love security operations/security architectures & engineering activities. I'm eager to learn how complex business architectures work and the interaction among each single component. Long version: I've started my career with activities mostly related to the offensive side, such as SAST, DAST, vulnerability assessment and penetration testing; I've also earned a certification in that field: GWAPT from GIAC. However, soon I've realized that I don't want to become an ethical hacker, so I moved to a wider range of security activities in order to get to know myself better (the list is not to be considered exhaustive)- threat intelligence platforms such as MISP or Anomali- developing in java some core functions of an HSM (Hardware Secure Module), creating and testing policies for a UEBA SIEM- setting up from scratch vulnerability management products, e.g. Qualys, and privileged access solutions e.g. OneIdentity - playing with breach attack simulations products; e.g. Cymulate One of the activities that I'm most proud of was proposing to a client to extend Fortinet FortiManager's functionalities with a custom web application by using Django Web Framework: I had to take care of everything, from server provisioning and configuration to firewall rules definition, Apache installation/configuration, and the Secure SDLC process itself of the web application. I had a lot of fun writing code with security in mind, leveraging everything that I've learned during the initial offensive activities. All these activities made me realized a lot of important things about myself: 1) I'm not a specialist person; I'm a generalist person who loves to be able to connect the dots between different security areas. So, if you are looking for the best ethical hacker, the best product specific specialist, the best, I'm not the perfect fit. 2) I have a preference for blue/purple team activities; this is why I pursued the GDSA and GDAT GIAC's certifications and I will continue to work mostly within the area of Security Architectures & Engineering 3) I'm interested also in web application security; I enjoy writing secure code 4) Last but not least, I have found out that I am good at relating to people, both team workers and executives. I don't like competitiveness, I like cooperation. My ultimate goal is becoming a Security Engineer/Architect who has a deep knowledge and wide experience.