Milchis Catalin-Marian

Penetration Tester | Telecom

Profile

Penetration tester and 4th-year Telecommunications student at Transilvania University of Brasov. Hands-on experience in web and API penetration testing on client assessments at Arvato Systems Romania and in telecom R&D at Mitel Networks Romania on the OpenScape 4000 platform (tooling, system configuration and virtualisation), backed by CTF competitions representing UNITBV and the Google.org Cybersecurity Seminars run with Virtual Routes.

Experience

  1. Junior Penetration Tester (part-time), Arvato Systems Romania

    • Perform web application and API penetration tests, from scoping to reporting and remediation advice.
    • Research AI frameworks to assist penetration testing workflows.
    • Expand offensive-security methodology and tooling on real client engagements.
  2. Junior Software Engineer (part-time), Telecom R&D, Mitel Networks Romania

    • Develop internal Python and JavaScript tooling for the OpenScape 4000 telecom platform (Assistant Manager team).
    • Work with Hyper-V, Linux and C components across telecom system configurations.
  3. Member, Brasov Cybersecurity Community

    • Active member of the local cybersecurity community: meetups and workshops.
  4. Student Intern, Mitel Networks Romania

    • OpenScape 4000 telecom systems: system configuration, virtualisation and C-level work.
    • First hands-on exposure to carrier-grade telephony platforms and their testing practices.
  5. CNC Machine Operator, Schaeffler Romania SRL

    • Operated CNC machine tools at the Cristian (Brasov) production site.
    • Worked to engineering drawings and quality requirements within a manufacturing team.

Skills

Offensive security
  • Web & API penetration testing
  • vulnerability assessment
  • recon and content discovery
  • reverse engineering
  • CTF
Tools
  • Burp Suite Pro
  • Nuclei
  • Nessus
  • Metasploit
  • sqlmap
  • Nmap
  • ffuf
  • Gobuster
  • feroxbuster
  • Hydra
  • Hashcat
  • Bruno
  • Wireshark
  • Ghidra
Telecom & networks
  • OpenScape 4000
  • TCP/IP networking
  • Modbus
Programming
  • Python
  • C / C++
  • Embedded C
  • Assembly
  • JavaScript
  • PowerShell
  • Bash
Systems
  • Kali Linux
  • Linux
  • Windows
  • VMware
  • Hyper-V
  • Docker
  • Git
Languages
  • Romanian (native)
  • English (B2)

Projects

  1. CC1101_DRIVERCC driver for the CC1101 sub-GHz radio transceiver, used in embedded wireless systems and radio-frequency research.
  2. RTSP_TO_HTTPPythonConverts RTSP streams (IP cameras) into HTTP streams for direct viewing in the browser.
  3. modbusPythonAnalysis of the Modbus protocol in industrial (OT/SCADA) systems, useful for testing the security of connected equipment.
  4. CST-MATLAB-2.4Ghz-AntennaMATLABMicrostrip ISM 2.4–2.5 GHz antenna designed in CST/MATLAB, for wireless microcontroller systems (IoT, embedded).
  5. DOS-X_ASMAssembly16-bit graphical application in Assembly for DOS that draws directly to VRAM.
  6. infoTRONC++Teaching materials for introductory mechatronics workshops.

Education

Telecommunications, 4th year, Transilvania University of Brasov

  • InfoTRON 2026 mentor: six weeks of mechatronics workshops (ESP32) for two high-school groups in Brasov
  • SAS Entrepreneurial Student School (UNITBV)

Interests

Wireless and RF security, software-defined radio, hardware hacking, antenna design.

Training & achievements

  1. Google.org Cybersecurity Seminars: vulnerability assessment for Regional Brasov Hospital

    Selected for the Google.org Cybersecurity Seminars programme, run in collaboration with Virtual Routes at Transilvania University of Brasov, in which trained students deliver security services to local organisations. Conducted a vulnerability assessment for the Regional Brasov Hospital.

  2. Summer AFT Cyber Security School 2025

    Intensive cyber security school organised by the Nicolae Balcescu Land Forces Academy together with CyberCor, Codwer SRL, Visma SRL and DMI Automotives.

  3. 7th IEEE Summer School on Antennas, Propagation and RFID Applications

    Hands-on RF training with Vector Network Analyzers (Rohde & Schwarz), antenna radiation mapping (Anritsu) and electromagnetic simulation in CST Studio, held at the Nicolae Balcescu Land Forces Academy in Sibiu.

  4. Volunteer at DefCamp; attended CyberSea Festival and DevTalks

    Volunteered at DefCamp and attended talks and workshops at CyberSea Festival and DevTalks.

  5. Cybersecurity and Artificial Intelligence Training Programme (PNRR)

    National programme run under Romania's Recovery and Resilience Plan: security fundamentals, penetration testing and red-teaming methodologies, identity and access management, application security, and AI/ML foundations including large language models.

  6. CTFESCU 2025 (CTF Eminescu, 4th edition)

    Capture-the-flag competition covering cryptography, web application exploitation, reverse engineering, OSINT, steganography and artificial intelligence.

  7. BVCYH, Brasov Cyber Hub Conference (3rd edition)

    Reverse engineering and malware analysis sessions: Ghidra and UPX unpacking, ransomware propagation, encryption and detection evasion, plus the NIS2 directive. Hosted by the Faculty of IESC, Transilvania University of Brasov.