Danfoss

● DevSecOps Strategy & Implementation: Lead the integration of security practices into our development lifecycle using tools such as SAST, DAST, and SCA.

● Penetration Testing Coordination: Organize and execute penetration testing activities to identify potential vulnerabilities.

● ISMS & ISO 27001: Lead the implementation of Information Security Management Systems (ISMS), conduct gap assessments, manage risk, and drive ISO 27001 certification processes for our SaaS offerings.

●  Security Support & Communication: Provide expert support on security-related inquiries, manage communications with customers. 

●  M&A Security Evaluation: Assess software security and architecture during mergers and acquisitions.

●  Cross-Functional Collaboration: Working closely with business units and segments to address security topics across organization.

●  Standards & Regulations Compliance: Ensure adherence to relevant standards and regulations, including NIS2 and ISO 27001.

Global Security Lead

● DevSecOps Strategy & Implementation: Lead the integration of security practices into our software development lifecycle using tools such as SAST, DAST, and SCA.

●  Cloud Security: Improve the security of our SaaS solutions by implementing Web Application Firewall (WAF) and managing cloud related risks with Cloud Security Posture Management. Ensure compliance with relevant standards and deploy security controls.

● Alert & Issue Management: Triage alerts and issues reported by SCA, SAST, DAST. 

●  Collaboration with Development Teams: Working with development teams to set up security tooling and guide them in implementing security remediations.

● Security Support & Communication: Provide expert support on security-related inquiries, manage communications with customers. 

●  Penetration Testing Coordination: Organize and execute penetration testing activities.

●  Standards & Regulations Compliance: Demonstrate expertise in security standards and regulations, including ISO 27001, CRA, and NIS2.

Security Engineer

●  Development management: Drive the design, development, and deployment of the Danfoss monitoring system for district heating, 

●  Agile Process Implementation: Implementation and continuous improvement of agile methodologies (SCRUM). 

●  Stakeholder management: Work closely with the product owner and stakeholders to gather and prioritize feature requests, ensuring alignment with business objectives and customer needs.

●  Technical Preparation: Lead the technical preparation and analysis of feature requests. Close collaboration with development team to ensure successful feature implementation.

●  Global Team Management: Manage  development team spread across multiple countries.

●  Close cooperation with development team on feature implementation

Software Development Team Lead

●   Development of SaaS Solution: Implement features for district energy systems management solution.

●   Ensure Application Security: Apply security best practices, including OWASP TOP 10 guidelines, and conduct Static (SAST) and Dynamic (DAST) Application Security Testing.

●   Agile development process: Collaborate within a team of over 10 members using SCRUM methodology. 

Technologies:  React, PWA (Progressive web apps), NodeJS, Mqtt, Mongo, Influx, MySQL, Docker, Azure, Kubernetes, Tenable, SonarCloud, Cypress, Tenable, SonarCloud

Software Development Engineer

● Development team lead: Led a team of developers in designing and developing a web portal on the DotNetNuke CMS platform, providing various functionalities for tradesmen in Slovenia. The portal was developed using ASP.NET Web Forms, JavaScript, jQuery, JQueryUI, and SQL Server.

● Lead Frontend Developer: Lead the frontend development of a Document Management Solution using Angular2, TypeScript, Bootstrap2, AngularCLI, Gulp, and various third-party dependencies.

● Web Developer position role:

    Contributed to the development of a Document Management System utilized daily by numerous 
    employees, managing extensive data storage. Technologies used included ASP.NET MVC, JavaScript, 
    jQuery, JQueryUI, LINQ, WCF, NHibernate, and SQL Server.

    Implemented the frontend of a Single Page Application for voting, utilizing AngularJS and 
    Bootstrap. The application consumed REST APIs via the OData protocol, with server-side 
    development in ASP.NET MVC, Entity Framework, and SQL Server.

    Developed frontend functionalities for the Slovenian eGovernment portal (http://e-uprava.gov.si) 
    using HTML5, Less, JavaScript, jQuery, Bootstrap, CSS3, and additional libraries.

    Designed and developed the administration module of an e-payments web application using 
    ASP.NET MVC, JavaScript, jQuery, Bootstrap, WCF, and SQL Server.

Senior Web Developer

●  Features development: Engineered a range of web functionalities, including online credit calculators and animated monthly expense graphs, for several Slovenian bank. Utilized technologies such as ASP.NET Forms, HTML, CSS, jQuery, JavaScript, jQuery-UI, WCF, TFS, and SQL Server.

Web Developer

At Danfoss, I lead security initiatives with a focus on DevSecOps, ensuring that tools like SAST, DAST, and SCA are integrated into our development processes. I am responsible for establishing Information Security Management System (ISMS), managing IT risks, and driving our ISO 27001 certification for our SaaS solutions. I collaborate with business units across the company to effectively address security challenges.

With over 10 years of experience in software development, I have served as both a developer and a team leader, successfully guiding projects through various stages. This extensive background enriches my approach to security, allowing me to blend technical expertise with leadership skills.

Taplio

Blaž Gvajc's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Blaž Gvajc's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Blaž Gvajc's Linkedin Analytics