About Lukasz
- AI/LLM security architecture review (OWASP LLM Top 10, agentic systems, RAG pipelines)
- Cloud architecture review — Azure-first, Zero Trust, defence-in-depth
- Threat modelling for new products and features
- DevSecOps pipeline review — identifying security gaps in your CI/CD
- ISO 27001 / ISO 42001 gap analysis
- Security review for regulated products (MedTech, fintech, GDPR)
Polish
Native or bilingual
English
Fluent
German
Basic
Experience
- EYSecurity ConsultantDecember 2022 - Today (3 years and 6 months)• Led in over 50 information security reviews to onboard new services and systems and upgrade existing ones into the EY cloud infrastructure as per security policies,• reporting risks to stakeholders,• reviewing reports from security scanning tools SCA, SAST, DAST, Container Security and compliance, communication related risks to stakeholders and senior management,• cooperating with the Privacy and Confidentiality Impact Assessment (PIA), Business Impact Analysis (BIA), Security Supplier Risk Assurance (SRA) departments,• creating and updating Minimum Security Baseline (MSB) documents,• reviewing of certification testing results and support with remediation actions,• providing recommendations for project team on security architecture, vulnerability remediation, risk assessment,• researching products, their security and implementation best practices. . Technology/Standards/Tools: Archer GRC, Azure, Azure DevOps, Windows Servers, Ubuntu, RedHat, CIS, CVSS, Checkmarx, Mend, Qualys, Aguasec, GitHub, ISO27001, NIST 800 series.
- SmartpatientSecurity EngineerJuly 2022 - November 2022 (4 months)• Leading the implementation of security standards and necessary controls to protect cloud based MyTherapy platform (ISO27001, OWASP, NIST 800 series),• working closely with the application development: Backend, Frontend (mobile IOS, Android), product, and• software QA teams to implement software security for the service operating in AWS.Technology: AWS (AWS Backup, IAM, S3, RDS, CLI), GitHub, Dependabot, Jira, Confluence, 1Password, Slack, CloudFormation, Python (troposphere), CVSS, NVD.
- S3 Connected HealthInformation Security OfficerNovember 2019 - June 2022 (2 years and 7 months)• Maintenance of the Information Security Management System (ISMS) according to ISO 27001 – e,.g: processes and procedures maintaining, risk incidents handling, coordinating security risks management, asset and access management
Recommendations
Be the first to recommend Lukasz
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Lead Auditor for Information Security Management System ISO/IEC 27001:2022BSILead Auditor for Information Security Management System ISO/IEC 27001:2022
- Artificial Intelligence A-Z 2024: Build 7 AI + LLM & ChatGPTErnst & Young GlobalArtificial Intelligence A-Z 2024: Build 7 AI + LLM & ChatGPT