Private Company

I design and manage security solutions aligned with business goals. I deploy, optimize, and manage network security technologies, contribute to vulnerability assessments, support compliance assessments and audits (ISO 27001, SOC 2, DORA, SEC), and facilitate incident response.

Current Tech Stack
Check Point FW, Palo Alto FW, Fortigate FW, Cisco ASA, F5, NGINX, Akamai Guardicore, RedHat ACS, RedHat OpenShift, Zscaler, Cisco R&S, Squid, Elastic Search, Kibana, Logstash, Nozomi, Claroty, Splunk SIEM, Exabeam, SOAR, Tenable Nessus, Qualys, Ubuntu Server, MS Azure, Keycloak, Okta, Azure DevOps, Ansible, Phoenix Contact mGuard Remote Access, Propius Machine Selector, OpenVPN, Docker, Kubernetes, Security Scorecard

What I've done so far:
● Managed the external Vulnerability Posture of the organization and raised the reputation from D to A
● Implemented advanced micro-segmentation strategies and optimized firewall/IPS configurations, reducing lateral threat movement (90%), unauthorized access (65%), and false positives (95%).
● Designed, implemented, and optimized network security solutions, security operations, and incident response processes, and led incident response efforts resulting in:
- 40% reduction in mean time to detection (MTTD) and 60% faster incident resolution times
- 95% decrease in false positive alerts through refined detection rules and automated threat details enrichment
● Worked with project teams to help build secure architecture designs and develop SOC security architectures
● Designed processes to implement the information security policies.
● Supported ISO 27001, SOC 2, DORA, and SEC audits through documentation, security control implementation, and audit response; led industry-specific remediation (e.g., MasterCard's RiskRecon).
● Contributed to the development of business continuity plans and disaster recovery plans
● Designed and led business continuity and disaster recovery tests.

Cybersecurity Architecture & Engineering Consultant 

Bridging Gaps

Bridging Gaps' mission is to bridge the gap between potential and performance through expert career mentoring and coaching, empowering mid-management professionals in IT, Consulting, and Services sectors to achieve their highest potential.

What I do: 
Pro bono career coaching and mentorship for IT and Tech Professionals.
I work pro bono to help individuals design and build fulfilling careers, whether they're aspiring cybersecurity professionals breaking into the field or individuals seeking a more meaningful career shift.
I provide personalized guidance on career transitions, technical skill development, and certification strategies while supporting job search optimization, professional growth, and long-term career fulfillment.

Career Design and Transformation Partner

Honeywell

I led the design and optimization of security solutions across multiple platforms (Cisco, Palo Alto, Fortinet, Check Point). I focused on network security, IPS fine-tuning, and security automation while managing vulnerability assessments, incident response, and providing mentorship to enhance the organization's security posture.

● Designed and advised on complex technical solutions across a range of vendors, including Cisco, Palo Alto, Fortinet, Check Point, and Juniper, ensuring robust security architectures for diverse client environments.
● Mentored interns and delivered internal technical training sessions, enhancing team capabilities and fostering a culture of continuous learning and development.
● Implemented and fine-tuned security policies on critical devices such as Cisco ASA, Checkpoint FW (R77.30, R80), and Palo Alto FW, strengthening overall network security posture.
● Automated repetitive tasks using custom scripting, improving operational efficiency and reducing manual workload for the cybersecurity team (Ansible, GitLab, Jenkins).
● Developed and maintained backup policies for critical infrastructure, ensuring data integrity and rapid recovery in case of system failures.
● Conducted periodic reviews and audits of firewall policies to minimize attack surfaces, ensuring compliance with both CIS benchmarks and vendor-specific best practices.
● Monitored security logs and system alerts to detect potential intrusions, ensuring rapid response and minimizing downtime through proactive security measures.
● Led the configuration and management of VPN tunnels, ensuring secure remote access and maintaining system performance standards.
● Tuned Intrusion Prevention Systems (IPS) to meet client-specific security and performance requirements, reducing false positives and enhancing detection accuracy.
● Oversaw the upgrade and patch management process for various security devices, maintaining strong defenses against emerging vulnerabilities.

Senior Advanced Cybersecurity Architect / Engineer

Advanced Cybersecurity Architect / Engineer

ING Romania

I supported risk management initiatives and ensured compliance with internal policies and regulatory standards. I also contributed to strengthening security controls, supporting IT projects, and leading incident investigations to enhance the bank's overall security posture.

My responsibilities included, but were not limited to: 
● Conduct application and infrastructure security and vulnerability assessments; 
● Perform proactive research to identify and understand new threats, vulnerabilities, and exploits; 
● Support IT department and business functions in setting up controls to proactively manage information security-related risks; 
● Support bank projects and changes from the perspective of IT and Information Security; 
● Internal contact for questions related to IT and Information Security; 
● Advice and support regarding Information Security requirements for IT Assets and processes; 
● Participate in the implementation of the security architecture, both in terms of infrastructure and applications; 
● Review and approve the operating security guidelines (OSG) developed for IT Assets; 
● Monitor the scope and effectiveness of security controls in IT processes (e.g. patching, vulnerability management, lifecycle management, external connections management, security event monitoring, technical state compliance monitoring, penetration testing, change management, etc.); 
● Investigate security incidents and define remediation plans accordingly; 
● Redesign the management of Cybersecurity Incidents (People, Policies, Procedures, Tools, etc).

Information Security Officer

I deployed, managed, and secured network infrastructures, ensuring the protection of systems through configuration, monitoring, and troubleshooting. My focus was on maintaining the integrity of security devices, optimizing performance, and supporting incident response efforts.

My responsibilities included, but were not limited to:
● Manage the following technologies: Web Application Firewall, IDS/IPS, DDoS tooling, Firewalls, Web Gateway, Mail Gateway, NAC, Endpoint Security Solutions, Load Balancers, and Vulnerability Management;
● Implement, maintain, and troubleshoot a complex security tooling infrastructure;
● Perform daily operating system administration tasks, including hardware and software upgrades, patch management, and maintaining regulatory controls;
● Review the environment and have initiatives to reduce failures, and defects and improve performance;
● Perform daily systems checks and correct any issues;
● Perform performance analysis, proactive troubleshooting, continual improvement, and capacity planning;
● Ensure timely and accurate resolution of the incidents on the administrated systems;
● Investigate the problems in the production environment;
● Document tasks and changes, including deep analysis in order to prevent any downtime;
● Maintain security and data integrity;
● Define and refine IT security runbooks;
● Test the effectiveness of the existing security controls;
● Coordinate IT security actions in case of an incident.

Senior Security Infrastructure Engineer

I was responsible for designing, implementing, and troubleshooting complex network and security solutions across various platforms. My role involved managing security policies, maintaining device configurations, and ensuring the integrity of network infrastructures while supporting clients' evolving security needs.

My responsibilities included, but were not limited to:
● Designing or advising on different technical solutions covering a large area of vendors: Cisco, Palo Alto, Fortinet, McAfee, Check Point, Juniper;  
● Troubleshooting or advising in the troubleshooting process of different types of issues in regard to: Cisco Routers, Cisco Core Switches, Cisco ASA, Checkpoint FW (R77.30, R80), Palo Alto FW, Juniper FW, McAfee NSP;  
● Implementing and troubleshooting security policies on Cisco ASA, Checkpoint FW (R77.30, R80), Palo Alto FW;  
● Configuring and maintaining backup policies;  
● Maintaining the security posture of the managed devices in accordance with CIS and vendor-specific best practice guides;  
● Perform periodic reviews and analysis of firewall policies in order to reduce the attack surface to a minimum accepted one;  
● Monitor logs and output of various software and data collected by monitoring systems to identify abnormal situations, computer attacks, system downtime, and use of access rights;  
● Respond to key system alerts; determine the optimal technical solution for a specific issue.

Network Consultant

Reliance acsn

I led a team responsible for managing and securing client network infrastructures, ensuring high service quality and adherence to security best practices.
● Led a team managing and securing client network infrastructures, ensuring high service quality and adherence to security best practices.
● Oversaw incident response efforts across multiple security platforms, guiding the team in troubleshooting and resolving security incidents efficiently.
● Directed firewall policy configuration and optimization, ensuring robust security while mentoring team members on best practices.
● Conducted security reviews and compliance assessments, leading the team in minimizing attack surfaces and maintaining industry standards.
● Supervised log monitoring and VPN management, ensuring quick response to threats while supporting secure remote client access.

Managed Security Services Team Leader

Oracle

My responsibilities included, but were not limited to, the support of devices from the following list:
•	Firewall - Juniper, Fortigate
•	Load Balancer - F5
•	Proxy Web Gateway – McAfee
•	IPSec VPN - Juniper, Fortigate
•	Array SSL VPN
•	Cisco AAA
•	Cisco ASA Remote Access VPN

Network Security Engineer

Secureworks

My responsibilities included, but were not limited to:
•	Analysis of different attack vectors (malicious e-mails, malicious documents (MsOffice, PDF, etc), malicious scripts, etc);
•	Analysis of InfoSec incidents;
•	Correlating pieces of information gathered from different InfoSec Intell Sources IPVoid, Alien Vault OTX, Sucuri, Schodan, Xnode, URL Void, etc);
•	Raw log output analysis;
•	Event correlation (QRadar, Cylance, SEP, Sourcefire, Cisco ASA, FirePower, Juniper FW, F5 LTM, Windows 7/10, Windows Servers, Linux Servers, Qualys VMS, ProofPoint, Cisco Threat Grid, REMNUX, Websense);
•	Knowledge sharing with other teams from SecureWorks and the customer’s environment;
•	Best practice guidance and knowledge sharing in the fields where I have relevant hands-on experience.

Senior Information Security Analyst

Cegeka Romania

My responsibilities included, but were not limited to:
•	Implementing routing on different types of devices: Cisco Routers, Cisco Core Switches, Cisco ASA, Checkpoint FW, Fortigate FW, Palo Alto FW, Juniper FW, OpenBSD FW, PfSense FW;
•	Securing networking devices - Management, Data & Control Planes;
•	Implementing PBR rules on different devices (as it can be seen above);
•	Setting up and debugging VPN tunnels and also SSL VPNs (F5 APM);
•	Configuring Virtual Servers on the F5 LTM;
•	Configuring and upgrading network devices;
•	Tuning IPS functionality according to the customer's security and performance requirements;
•	Intaking remote sites for one of our customers;
•	Upgrading networking devices (Cisco, Aruba);
•	Managing user access for specific platform;
•	Incident response and management;
•	Troubleshooting networking and security related incidents that affect the environments of the customers, in accordance with their priorities and SLAs.

Network & Security Support Engineer

Romanian Navy Headquarters

My responsibilities included:
• Implementing Information Security Standards and Procedures to guarantee Confidentiality, Integrity, and Availability regarding the managed data; 
• Performing specific periodic Information Security inspections; 
• Providing direction to lower-level personnel when necessary;
• Gain senior management and stakeholders' commitment to supporting the implementation of the information security strategy; 
• Define, implement, and monitor information security responsibilities throughout the organization and lines of authority; 
• Conduct audit activities; 
• Contribute to the annual acquisition plan regarding specific technology; 
• Identify internal and external factors that impact the information security strategy; 
• Identify legal and regulatory compliance requirements; 
• Keep senior management and stakeholders up to date with the specific legal and regulatory compliance requirements; 
• Evaluate information security controls against acceptable risk management levels; 
• Maintain the process for information asset identification and classification; 
• Monitor and report information security metrics to senior management and key stakeholders; 
• Monitor and maintain incident response plans, specific business continuity plans, and the disaster recovery plan; 
• Define and implement processes to ensure proper information security incident management; 
• Organize and train incident response teams;  
• Define, maintain, and monitor the information security awareness and training program; 
• Provide analysis and support for continuous improvement initiatives; 
• Provide enterprise-wide retrospective analysis of schedule performance while continuously improving the involved processes; 
• Working closely with field operations managers and enterprise leaders to complete the scheduled assignments. 
• Creating, distributing, and maintaining organizational-wide strategic, operational, and tactical plans regarding military equipment acquisitions;

Cybersecurity Professional | I Help Businesses With Secure Digital Environments For Their Employees And Customers | Writing About Cybersecurity, Personal Development, Success Mindset, Productivity And Career Development

Cybersecurity Architecture and Engineering Consultant | Career Design and Transformation Partner | Founder, Mentor, Certified Career Coach

CISSP · CISM · A-C|CISO · Check Point CCSE · Palo Alto PCNSE · CCNP TSHOOT · CCNA Security · CCNA CyberOps · ZCCA-IA · Comptia Security+ · Software Security Practitioner - Software Architect · Cisco Certified Specialist - Enterprise Advanced Infrastructure Implementation

I'm a dynamic Information Security Professional, a former Navy officer, with over 10 years of hands-on experience in cybersecurity architecture and engineering, security operations, incident response, and network security management, in both Private and Public sectors.

While I avoid overspecializing in a single field, my background, including 12 years in the military, helps me easily adapt to new environments, technologies, and teams.

I value transparency and honesty, and I am a self-learner, committed to self-improvement and personal growth.

Here's how I can help:

Cybersecurity Consulting: Providing strategic guidance and practical solutions to safeguard your digital assets, mitigate risks, and enhance your security posture.

Cybersecurity Technology Deployment, Management, and Optimization: I ensure your systems are fortified against threats while optimizing their performance for maximum efficiency.

Information Security Management Program: Crafting comprehensive programs tailored to your organization's needs.

Information Security Risk Management: Identifying, assessing, mitigating risks, and developing proactive strategies to safeguard your data and maintain business continuity.

Information Security Program Optimization: Fine-tuning existing security programs, aligning them with industry best practices, and driving continuous improvement.

Service Management Consulting - Delivery & Optimization: By streamlining service management processes, I enable your organization to deliver exceptional customer experiences, optimize resources, and drive business growth.

I am also a Certified Career Coach, committed to helping others discover, design, and grow fulfilling careers that align with their values and purpose, pro bono, through mentorship and personalized career guidance.

Liviu Munteanu CISSP, CISM

Making lives of CEOs and Owners easier | Helping entrepreneurs launch their tech to market within 6 months | Fractional CTO | Makes sense when it is needed the most 🔥

Why I Do This?

I’ve seen too many promising ideas fail, not because the founders lacked vision, but because their products couldn’t keep up with the demands of real users.
I help you avoid that trap.

I dive deep into what makes customers stay, what makes them leave, and what makes them love a product enough to tell their friends. I focus on designing systems that can scale to millions of users without breaking - technically or financially, and that harness AI where it truly adds value.

This isn’t about chasing hype. It’s about building products people can’t live without. Products that feel effortless to use, yet are engineered with precision under the hood.

If you’re ready to turn your idea into something people love, let’s make it real.

👉 DM 'SCALE' or visit rohangirdhani.com to chat about turning your idea into a SaaS product that truly scales.

📩 info@rohangirdhani.com

Rohan Girdhani

Working with a founder is more about energy
than product or tech alone.

Before there’s a team,
they are the team.

They’re carrying vision, doubt, pressure, hope all at the same time.

Early-stage startups don’t move like navies.
They move like pirate ships.
Fast. Scrappy. Directional.
No room for ego. No time for noise.

What actually wins at this stage isn’t brilliance.
It’s mindset:
• Trusting each other’s strengths
• Keeping the room hopeful when things get hard
• Killing bad ideas quickly
• Finding a way forward, no matter the situation

Skills can be learned. Product can be built.

When I work with a founder,
it never feels like a job.
It feels like working with a friend
who genuinely wants to win.

And my role becomes simple
be the backbone when things get heavy.

Because when the energy is right,
the odds don’t just improve
they bend in your favor.

Rohan Girdhani (The TechDoc)

The Product Builder Behind 30+ Bold Startups | 82% Success Rate | I Build. You Launch. We Scale. | I’m the guy founders call when they’re done playing safe.

Software is actually simple.
We just make it complicated.
Here’s an easier way to think about designing great product.

Think of your product like your home.
From the outside, it should feel welcoming.
Clean. Intentional.
No clutter pretending to be personality.

When someone arrives, you don’t overwhelm them.
You help them unload the day.
A place for their shoes.
Somewhere to put their bag.
A moment to breathe.

Then comes a small reward.
A drink.
A coffee.

Something that says, “You’re in the right place.”
Only then do you offer what they came for.
Food. Conversation. Comfort. Value.

And when they leave, the feeling is simple:
“That was easy.”
“That felt good.”
“I want to come back.”

That’s the real customer journey.
• Clean, thoughtful design
• Remove friction before asking for effort
• Reward action, even small ones
• Deliver immediate value
• Give a reason to return

Do this consistently,
and you stop designing software.
You start designing experiences.

And experiences are what people remember.

One of the most underrated uses of ChatGPT right now.
Building mental models and mind maps.

Most people use it just to chat.

But the real power is using it to untangle messy thinking 
and make better decisions.

When there’s no mental model,
teams keep talking in circles.

When there is one,
alignment becomes easier
and execution becomes faster.

Here’s how I use it:
- Define the real problem
- Share context about the product or business
- Explain where we are and where we want to go
- List possible options and constraints
- Ask ChatGPT to turn it into a structured model

Then I refine the image —
zoom in, crop sections, improve specific parts.

What used to take hours in flowchart tools
now takes minutes.

And we’re getting approvals for execution
faster than ever.

Not because we communicate better.
But because we see the problem more clearly together.

If you haven’t tried using ChatGPT this way yet,
it’s worth experimenting.

Churn is the word most founders quietly fear. 
And it makes sense. 
It feels unpredictable. Messy. Out of control. 

But what if churn isn’t random? 
What if the decision to leave happens much earlier 
inside the product itself? 

In specific flows. 
Specific moments. 
Where intent quietly dies. 

If those moments could be spotted early and fixed directly in code… 
that changes the game. 

There’s a tool exploring this way of thinking.
It’s called Limeloop.
https://limeloop.app

If this resonates, you’ll know why.

Today I shipped something I never planned to build.
It came out of years of working with founders.
Different products.
Different markets.

Same quiet problem.
Users sign up.
They try the product.
And then… they don’t come back.

Everyone looks at dashboards.
Everyone stares at charts.

But no one can answer the real question:
Why did the user mentally leave?

While building alongside founders, 
I kept seeing it happen inside the product itself.
- In the flows.
- In the friction.
- In the moments where intent quietly dies.

So I built Limeloop.
Not as an analytics tool.

But as a way to look at retention from the code up.

Limeloop:
• Reads your codebase
• Maps real user flows
• Finds where users drop off — before retention crashes
• Explains why they don’t return
• Suggests fixes at the code level, ordered by impact
• Gives you a clear retention health picture

No vanity metrics. No guessing.
No “maybe try this” advice.
Just clarity.

I built this while working with founders 
who cared deeply about what they were building — 
and didn’t want growth to be a guessing game.

Limeloop is live now.
If you’re a founder building something real
and retention keeps you up at night…

You’ll probably resonate with this.
👇
 https://limeloop.app

After testing 5,600+ vibe-coded apps,
34,232 security vulnerabilities were found.
Nearly 60% of these apps had serious security flaws.

The most common issues weren’t surprising:
• Leaked API keys and secrets
• Exposed assets
• Code paths vulnerable to common attacks

And honestly, this was inevitable.

Vibe coding is powerful.
It helps founders validate faster than ever.
That part is a win.

The risk starts when validation quietly turns into production.
What began as “just a prototype”
ends up touching real users, real data, real money.

Vibe-coded apps are a great starting point.
But once you see signal,
they need to be wrapped, hardened, and scaled the right way.

Speed gets you attention.
Quality keeps you alive.

If you’re building fast — just make sure you pause long enough
to turn momentum into something reliable.

Full report here 👇
https://lnkd.in/gztihfdE

Don’t overthink your product.
Founders are especially vulnerable to feature addiction.

The more experienced you get,
the more you want to do right by the customer.
You don’t want gaps.
You don’t want excuses.

So you start adding everything:
• What looks cool
• What competitors have
• Even the 2/10 “just in case” features

And somewhere along the way…
you stop shipping.

Now the product feels heavier.
The message gets blurry.
And customers don’t know what problem you’re actually solving.

Instead of solving one problem exceptionally well,
you’re solving many problems poorly.

That’s when you quietly turn into a tech company.
And that’s usually not why you started.

Ship faster.
Let the gaps be intentional.

Gaps help you learn:
• How customers actually understand the product
• Whether it’s truly helping them
  Or if they’re trying to solve a completely different pain

Start with your experience.
Then hand over the responsibility to customers as early as possible.
They’ll tell you what matters — if you let them.

I recently spoke with a founder.
Strong real estate platform. Clear demand.
They were spending $5k+ every month on ads
and pulling in ~200 signups.

From the outside, marketing looked solved.
Inside the product?
Most users were disappearing midway.

When I asked why —
there was no clear answer.

We ran Limeloop.
It showed a 42% retention rate
and pointed to specific breaks in the code and user flow.

Not guesses. Not charts.
Actual moments where user intent quietly died.

We fixed those.
Within one week,
they retained 50% more users into the next stage.

Same traffic.
Same ads.
Better retention.

That’s the difference between
spending more and understanding better.

If you want your retention auto-tested the same way
and see exactly where users mentally drop off,
reply “Retention.”

Thousands of businesses say they’re ready
to move towards digital transformation.

Most million-dollar companies aren’t blocked by money
or ambition.

They’re blocked by the lack of a blueprint.
They know something needs to change,
 but not:
 • what to fix first
 • where technology actually helps
 • how changes connect to outcomes

I see this pattern more often than I expected.

More software isn’t the answer.
It’s knowing which software,
where,
and why.

Without a blueprint,
execution becomes expensive movement.

AI models are just new engines in the car.
But raw power means nothing
if the body, transmission, and steering aren’t built to handle it.

That’s where most AI products quietly fall apart in production.

Simply swapping models won’t:
- Reduce token cost
- Guarantee better answers
- Fix context hallucinations

The real differentiator is your RAG pipeline.

A solid RAG system looks like this:
- Clear data sources — one version of truth
- Well-structured vector storage for fast retrieval
- Graph connections to link related knowledge
- A middleware layer that selects the right context
- Context merging logic before the model ever sees it

Only then do you send data to the AI.

And the output?
That depends on your product:
A dashboard, chart ,PDF, image, decision
Doesn’t matter.

What matters is this:
If your RAG system improves with every new interaction,
every new data point,
every correction…

You’ll outperform teams using newer models
with weaker foundations.

Reliable AI products aren’t model-first.
They’re data, context, and system-first.
And that’s where the real edge is built.

taplio

The Battle

Liviu Munteanu CISSP, CISM

Rohan Girdhani

Followers

Posts

Engagements

Likes

Performance ScoreRohan Girdhani's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Liviu Munteanu CISSP, CISM

Rohan Girdhani

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Rohan Girdhani's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreRohan Girdhani's LinkedIn Performance