Become an ambassador

I started in technical support at a security company, then switched to software development, moved into DevOps, and eventually circled back to cybersecurity—not by accident, but because each step made the next one feel natural.

Today, I am an ISC2 CISSP-certified Information Security Officer, while still writing code and managing infrastructure on a daily basis.

My full-stack background shapes how I approach security: I don’t just audit systems—I understand how they are built and operated.

I document my work across two blogs: root-security.eu, where I write about security engineering, Wazuh integrations, and compliance in practice; and ops.cafe, where I cover DevOps, self-hosted infrastructure, and platform engineering. The content comes from real production systems—custom Wazuh decoders and rules, pipelines, dashboards—all written with the level of detail I wish I could find when building new systems.