Senior incident responder on Booking Holdings' CSIRT in Bucharest, leading hands-on investigations of ransomware, phishing, cloud, supply-chain and AI/LLM-related attacks from triage through recovery. Day-to-day is log analysis, endpoint/identity/cloud forensics, threat hunting, playbook and detection improvements, and mentoring analysts, on 16/5 shifts with on-call.
Sign in to see your match