Milchis Catalin-Marian
Penetration Tester | Telecom
Profile
Penetration tester and 4th-year Telecommunications student at Transilvania University of Brasov. Hands-on experience in web and API penetration testing on client assessments at Arvato Systems Romania and in telecom R&D at Mitel Networks Romania on the OpenScape 4000 platform (tooling, system configuration and virtualisation), backed by CTF competitions representing UNITBV and the Google.org Cybersecurity Seminars run with Virtual Routes.
Experience
Junior Penetration Tester (part-time), Arvato Systems Romania
Present- Perform web application and API penetration tests, from scoping to reporting and remediation advice.
- Research AI frameworks to assist penetration testing workflows.
- Expand offensive-security methodology and tooling on real client engagements.
Junior Software Engineer (part-time), Telecom R&D, Mitel Networks Romania
Present- Develop internal Python and JavaScript tooling for the OpenScape 4000 telecom platform (Assistant Manager team).
- Work with Hyper-V, Linux and C components across telecom system configurations.
Member, Brasov Cybersecurity Community
Present- Active member of the local cybersecurity community: meetups and workshops.
Student Intern, Mitel Networks Romania
May–Jun 2025- OpenScape 4000 telecom systems: system configuration, virtualisation and C-level work.
- First hands-on exposure to carrier-grade telephony platforms and their testing practices.
CNC Machine Operator, Schaeffler Romania SRL
Aug 2019–May 2022- Operated CNC machine tools at the Cristian (Brasov) production site.
- Worked to engineering drawings and quality requirements within a manufacturing team.
Skills
- Offensive security
- Web & API penetration testing
- vulnerability assessment
- recon and content discovery
- reverse engineering
- CTF
- Tools
- Burp Suite Pro
- Nuclei
- Nessus
- Metasploit
- sqlmap
- Nmap
- ffuf
- Gobuster
- feroxbuster
- Hydra
- Hashcat
- Bruno
- Wireshark
- Ghidra
- Telecom & networks
- OpenScape 4000
- TCP/IP networking
- Modbus
- Programming
- Python
- C / C++
- Embedded C
- Assembly
- JavaScript
- PowerShell
- Bash
- Systems
- Kali Linux
- Linux
- Windows
- VMware
- Hyper-V
- Docker
- Git
- Languages
- Romanian (native)
- English (B2)
Projects
- CC1101_DRIVERCC driver for the CC1101 sub-GHz radio transceiver, used in embedded wireless systems and radio-frequency research.
- RTSP_TO_HTTPPythonConverts RTSP streams (IP cameras) into HTTP streams for direct viewing in the browser.
- modbusPythonAnalysis of the Modbus protocol in industrial (OT/SCADA) systems, useful for testing the security of connected equipment.
- CST-MATLAB-2.4Ghz-AntennaMATLABMicrostrip ISM 2.4–2.5 GHz antenna designed in CST/MATLAB, for wireless microcontroller systems (IoT, embedded).
- DOS-X_ASMAssembly16-bit graphical application in Assembly for DOS that draws directly to VRAM.
- infoTRONC++Teaching materials for introductory mechatronics workshops.
Education
Telecommunications, 4th year, Transilvania University of Brasov
Present- InfoTRON 2026 mentor: six weeks of mechatronics workshops (ESP32) for two high-school groups in Brasov
- SAS Entrepreneurial Student School (UNITBV)
Interests
Wireless and RF security, software-defined radio, hardware hacking, antenna design.
Training & achievements
Selected for the Google.org Cybersecurity Seminars programme, run in collaboration with Virtual Routes at Transilvania University of Brasov, in which trained students deliver security services to local organisations. Conducted a vulnerability assessment for the Regional Brasov Hospital.
Summer AFT Cyber Security School 2025
Intensive cyber security school organised by the Nicolae Balcescu Land Forces Academy together with CyberCor, Codwer SRL, Visma SRL and DMI Automotives.
Hands-on RF training with Vector Network Analyzers (Rohde & Schwarz), antenna radiation mapping (Anritsu) and electromagnetic simulation in CST Studio, held at the Nicolae Balcescu Land Forces Academy in Sibiu.
Volunteer at DefCamp; attended CyberSea Festival and DevTalks
Volunteered at DefCamp and attended talks and workshops at CyberSea Festival and DevTalks.
Cybersecurity and Artificial Intelligence Training Programme (PNRR)
National programme run under Romania's Recovery and Resilience Plan: security fundamentals, penetration testing and red-teaming methodologies, identity and access management, application security, and AI/ML foundations including large language models.
Capture-the-flag competition covering cryptography, web application exploitation, reverse engineering, OSINT, steganography and artificial intelligence.
Reverse engineering and malware analysis sessions: Ghidra and UPX unpacking, ransomware propagation, encryption and detection evasion, plus the NIS2 directive. Hosted by the Faculty of IESC, Transilvania University of Brasov.