Building Web Apps,
one framework at a time.
Cybersecurity-focused Full Stack Engineer and Mechatronics Engineer. I build full-stack web applications, then try to break them — so attackers don't get the chance.
About
Where hardware, software, and offensive security meet.
Recent Mechatronics Engineering graduate from the Warsaw University of Technology with hands-on experience across penetration testing, DevOps, and full-stack development. My engineering background gives me a systems-level view most pure software engineers don't get — I think about the whole stack, not just the code.
I've worked across the full software development lifecycle: secure coding, testing, deployment, and monitoring. My focus is finding vulnerabilities before someone else does, automating the boring parts, and shipping software that's fast, scalable, and genuinely hard to break into.
Outside of client work, I run Web App Penetration Labs — controlled environments where I hunt for SQL injection, XSS, and auth flaws using Burp Suite, Metasploit, and Wireshark, then document mitigations.
// quick facts
Experience
A path through QA, IT operations, and applied security engineering.
- Resolve hardware, software, and network issues across Windows, macOS, and mobile to minimize downtime
- Administer accounts, security groups, and permissions in Active Directory & Microsoft 365, including MFA configuration
- Document and prioritize issues in Jira / ServiceNow while building out the team knowledge base
- Manage full lifecycle of IT assets — configuring, deploying, and onboarding new-hire hardware
- Design and deploy full-stack apps with HTML, PHP, React, Node.js, Next.js, and REST APIs
- Build backend systems with authentication, database integration, and API endpoints
- Optimize performance to reduce load times and improve UX across devices
- Apply security best practices — input validation, secure authentication — across client projects
- Executed functional, regression, and localization testing across multiple gaming platforms
- Documented critical bugs with detailed reproduction steps, logs, and reports
- Ran exploratory testing to surface edge-case issues affecting performance and UX
- Developed cybersecurity training labs simulating real-world attack and defense scenarios
- Built environments with Virtual Machines and Docker for scalable, consistent deployment
- Automated security workflows using Python and Bash scripting
- Conducted penetration testing and vulnerability assessments on lab environments
- Performed functional, regression, and exploratory testing across multiple game titles
- Tracked bugs with structured reporting and clear reproduction steps
- Contributed to testing 3+ released games, ensuring compliance with quality standards
Projects
Selected work spanning offensive security research and production applications.
Web App Penetration Labs
Controlled environments for testing vulnerable web applications end-to-end.
- Identified SQL Injection, XSS, and authentication flaws
- Used Burp Suite, Metasploit, and Wireshark for analysis and exploitation
- Documented findings with recommended mitigation strategies
Pharmacy Management System
Full-scale web-based system built for Brismed Medical to manage pharmacy operations.
- End-to-end system design and deployment
- Database-backed inventory and records handling
School Management System
Full-scale platform built for Sandon Academy to run day-to-day school administration.
- Full-stack build from requirements to deployment
- Responsive UI across student, staff, and admin views
Landing Sites & Brand Design
Landing websites and graphic design work for restaurants and schools.
- Responsive marketing sites built to convert
- Brand and graphic design in Figma, Photoshop, and Illustrator
Skills
The tools I reach for, grouped by where they show up in the stack.
Languages & Frameworks
Security & Testing
DevOps & Cloud
Databases
Systems & Scripting
Design & PM
Education & Training
Bachelor of Science, Mechatronics Engineering
Penetration Testing
Let's build something secure.
Open to full-stack, DevOps, and cybersecurity roles in Warsaw and remote. Reach out — I usually reply within a day.