CISSP, CCSE Plus NG, RSA/CSE - SecurID
Warsaw Area, Poland
- Current
-
- Penetration Tests Specialist at ABN AMRO
- Past
-
- Technology Risk Analyst at ABN AMRO
- IT Security Expert at PTK Centertel (Orange Poland)
- System Engineer at Daewoo Dacom Communications
- Education
-
- Politechnika Warszawska
- Politechnika Warszawska
- Politechnika Warszawska
- Recommended
-
22 people have recommended Michal - Connections
-
255
connections
- Industry
- Computer & Network Security
- Websites
Michal Trojnara’s Summary
Security Management: ISO 27001 Lead Auditor qualification
Cryptography: protocols (SSL/TLS, IPsec, SSH, PGP) and algorithms (DES, AES, RSA, DH, EC)
Networking: expert knowledge of TCP/IP internals, firewalls (FireWall-1, IOS Firewall, iptables), routing (OSPF, EIGRP), GSM-related protocols (GTP, UCP)
System Administration: HP-UX, Solaris, MacOS X, Linux, Cisco IOS
Network Servers: Apache, Squid, Postfix, Sendmail, Qmail, Bind, FreeRADIUS, INN
Programming: C/C++, Assembler, Perl, PHP, Python, Shell
Languages: Polish - native, English - fluent - TOEIC 945/990 (gold), Spanish - basic, Russian - basic
Michal Trojnara’s Specialties:
IT security organization and technology, the author of stunnel encrypting proxy
Michal Trojnara’s Experience
-
Penetration Tests Specialist
ABN AMRO
(Public Company; ABN; Banking industry)
January 2008 — Present (1 year 7 months)
Penetration testing of online banking systems worldwide: web applications, client-server applications, network services, operating systems, network infrastructure.
Reverse engineering: machine code, Java SE/EE, Flash ActionScript.
Source code review: Java, JavaScript, PHP. -
Technology Risk Analyst
ABN AMRO
(Public Company; 10,001 or more employees; ABN; Banking industry)
November 2006 — December 2007 (1 year 2 months)
Performed Technology Risk Analyst tasks in Technology Risk Accreditation Process: defined the scope of risk assessments, identified technology risks, and designed cost-effective changes to mitigate identified risks to an acceptable level.
Performed Operational Risk Assessment of FX/MM applications worldwide including EBS, Reuters and Bloomberg interfaces.
Co-authored global ABN AMRO IT security strategy: Public Key Infrastructure, Enterprise Identity and Access Management. -
IT Security Expert
PTK Centertel (Orange Poland)
(Privately Held; 5001-10,000 employees; Telecommunications industry)
November 1998 — October 2006 (8 years)
Developed IT Security Policy based on ISO 17799 standard.
Designed identity management system, user accountability system and strong authentication solution based on SecurID tokens.
Designed and implemented a FreeRADIUS module for SMS-based strong authentication.
Designed security architecture for new systems including GPRS, WAP, Prepaid, Voicemail, SMSC, Lawful Interception (had Top Secret security clearance), Billing, CRM and Self-Care.
Worked on IT security audit (including penetration testing), incident management and forensics. -
System Engineer
Daewoo Dacom Communications
(Privately Held; 51-200 employees; Information Technology and Services industry)
June 1996 — October 1998 (2 years 5 months)
Supervised deployment and operations of LAN/WAN for Daewoo car sales in Poland (WAN based on Cisco routers, Frame Relay and VSAT/X.25 links).
Managed 10 HP-UX/PA-RISC and Solaris/SPARC servers, Informix databases.
Designed and implemented network perimeter security architecture for the whole Daewoo Corporation in Poland.
Michal Trojnara’s Education
-
Politechnika Warszawska
PhD , Cryptography , 2007 — 2011 (expected)
PhD thesis in progress on cryptographic hash functions, including SHA-3 competition candidate - StreamHash.
-
Politechnika Warszawska
MSc , Computer Science , 2004 — 2005
MSc thesis on stunnel cryptographic proxy has won Enigma competition for best thesis in cryptography and information security, 2005.
- Activities and Societies:
- WO@PW
-
Politechnika Warszawska
BSc , Information Systems and Decision Support , 1992 — 2004
Additional Information
Michal Trojnara’s Websites:
Michal Trojnara’s Interests:
Free Software, Go, photography, Bible
Michal Trojnara’s Honors:
(ISC)2 Certified Information System Security Professional (CISSP), 2007
ISO 27001 Lead Auditor qualification, 2007
Check Point Certified Security Expert Plus NG (CCSE Plus NG), 2003
RSA Certified Systems Engineer - SecurID (RSA/CSE - SecurID), 2000
Winner of Enigma competition for best thesis in cryptography and information security, 2005
Finalist of Trophées du Libre, 2005
