Available for engagements - Brașov, Romania
Available for solo engagements or team-led assessments with trusted security professionals.
Penetration Tester @ NTT DATA
Offensive Security · Bug Bounty · Cloud & AI Security
I'm Petre Radu Cătălin, an offensive security professional focused on penetration testing, security research, and practical risk assessment. I work on real-world web application and infrastructure testing, then turn findings into clear remediation paths.
// whoami
Offensive security professional and penetration tester based in Brașov, Romania. Known as Petre Radu to clients, peers, and the security community.
I'm Petre Radu Cătălin, an offensive security professional focused on penetration testing, bug bounty research, and practical security evaluation. I work as a Penetration Tester at NTT DATA and am based in Brașov, Romania.
I approach security with a practical mindset: focus on the issues that matter, validate how they can be exploited, and turn them into clear remediation steps that teams can act on. The goal is not just to find flaws, but to explain the real risk and support the fix.
My academic path includes a Master's degree in Cyber Security at Universitatea Transilvania din Brașov (2024-2026), alongside a Bachelor's in Renewable Energy Systems completed there between 2020 and 2024. This mix of study and hands-on practice has shaped my understanding of systems, networks, and security testing.
I also engage in vulnerability research through bug bounty programs on Intigriti and HackerOne, which keeps my work grounded in real-world exposure and responsible disclosure. I continue expanding my skills through security training, labs, and CTF-style exercises.
I value continuous learning and hands-on practice. Security is always evolving, so I stay engaged with training, tooling, and applied research across web, infrastructure, and defensive concepts.
For larger scopes, I collaborate with a small network of vetted professionals across offensive security, cloud, compliance, and incident response. I remain the main point of contact, while bringing in specialists when the assessment requires deeper coverage.
// partners
For larger scopes, I work with a small network of vetted professionals to bring in deeper coverage when an engagement needs additional specialist support.
BITUP Technology
IT & Cybersecurity Consultant
Specialty: IT governance, cyber risk management, ISO 27001 / NIS2 readiness, security controls
Role: Ten+ years across systems, IT infrastructure, and ISO 27001 audit readiness; brings IT governance, cyber risk, and NIS2 compliance expertise to governance-heavy engagements.
Contact: Available on request
// capabilities
Four interlocking disciplines. My offensive work is grounded in an understanding of defense - every assessment I run, from web penetration testing to cloud security review, is built to produce actionable defense.
Hands-on exploitation across the full attack surface - from web apps to the domain.
Breaking and hardening modern, ephemeral attack surfaces before attackers do.
Turning regulatory requirements into measurable, defensible security posture.
Knowing the defender's playbook sharpens every offensive engagement.
// history
Penetration testing, bug bounty research, and hands-on security work shaped by real-world findings and practical remediation guidance.
Engagement model: for broader scopes, I coordinate complementary work with trusted specialists in cloud, compliance, and incident response. I remain the primary point of contact and lead the assessment flow from scoping through reporting and remediation validation.
Bug Bounty Hunter
May 2026 - PresentRemote
Penetration Tester
Nov 2025 - PresentRomania · Remote
Vulnerability Researcher
May 2025 - Sep 2025Remote
Master's degree, Cyber Security
2024 - 2026
// featured_work
Selected projects from research, development, and real engagements - static malware analysis, forensic tooling, and the automation that powers my assessments.
PE File Analyzer for Static Malware Analysis
MalwarePeek is a Python-based portable executable analyzer built for malware analysts and reverse engineers. It parses PE headers, fingerprints packers, and scans samples against YARA rules - then generates clean HTML reports for triage.
Educational PoC - Authenticode Signature Extraction
A focused educational proof-of-concept that inspects authenticated code-signing metadata inside signed PE files. It demonstrates how signature blocks remain queryable and how tooling can surface embedded certificate chains for forensic review.
PrivateRecon & Vulnerability-Scanning Automation
An internal toolkit of Python and Bash scripts that automate reconnaissance, endpoint enumeration and vulnerability scanning. Used to deliver faster, repeatable assessments and cut end-to-end testing time by roughly 30% at NTT DATA.
// credentials
Focused cybersecurity training, hands-on practice, and participation in security exercises that sharpen real-world testing skills.
Curated highlights below from coursework, labs, and CTF-style practice.
eLearnSecurity Certified Penetration Tester (eCPPT)
INE / eLearnSecurity
OpenAI Cyber Practitioner
OpenAI · PartnerU
Microsoft AI Skills Fest 2026
Microsoft
AZ-700: Azure Networking Solutions
Microsoft Certified
Teaching the AI Fluency Framework
Anthropic
Puppet Environment Lab
Skillsoft
Google.org Cybersecurity Seminars
Google.org
Offensive security is a competitive sport. These results are how I train between engagements.
HackTheBox Season 9
Participation
TryHackMe Industrial Intrusion CTF
Participation
TryHackMe Honeynet Collapse CTF
Participation
// arsenal
The tools I reach for daily - offensive platforms, cloud CLIs, and the defensive stack I know well enough to test around.
Cobalt Strike
Sliver
Nighthawk
BloodHound CE
SharpHound
Rubeus
KrbRelayUp
NetExec
Impacket
Responder
Evil-WinRM
Ligolo-ng
Burp Suite Pro
Nuclei
ffuf
Pacu
AzureHound
GCPwn
Prowler
Garak
// write_ups
Technical write-ups on offensive security, cloud threats, and AI security - the lessons from real engagements, published to help the community.
A field guide to how I evaluate AI systems offensively - prompt injection, indirect injection through retrieved content, and the data-exfiltration bugs that leak what LLMs are told through their own outputs.
The top cloud misconfigurations I encounter on real engagements - S3 buckets, over-permissive roles, exposed credentials, and public snapshots - and how to find them before the attackers do.
A practical, phase-by-phase breakdown of how a single web application flaw can be chained into full Active Directory compromise - and the detection gaps that let it happen.
// connect
Available for remote and on-site engagements. Based in Brașov, Romania.