Cristian Soricu
Data loss prevention · Bucharest (UTC+2/+3)

Cristian Soricu

Five years reading security alerts. Lately, writing the code that reads them with me.

View my resume
Portrait of Cristian Soricu

About

I work on the functional side of data loss prevention — policy and rule configuration, detection tuning, change management. Three years as an L1 analyst taught me how to read an alert and tell signal from noise. Now I sit on the other side of it, turning what the business and compliance actually need into detection logic that holds up.

My background is engineering, but the move into IT wasn't planned. I was paying my way through university as a live sound technician — when the pandemic shut down live events overnight, that income disappeared with it, and IT was the technical ground I already stood on. Security is where it turned into a career I kept.

Outside the day job I build: mostly Python, mostly APIs, increasingly with Claude Code and Copilot alongside me — this site included. Right now I'm going deeper on web development and what AI tooling is actually good for. I still do live sound on weekends, ten years of shows later, which is where I learned to stay calm when something breaks in front of an audience.

  • ITIL v4 Foundation — PeopleCert, 2025
Toolbox
  • Python
  • REST APIs
  • Enterprise DLP
  • Claude Code
  • GitHub Copilot
Languages
  • Romanian
  • English
  • French

Focus areas

Data loss prevention

Policy and rule configuration, detection tuning, and change management on an enterprise DLP platform. Fewer false positives, better escalations.

Python & APIs

I automate the parts of my work that shouldn't be manual, and build small tools around the APIs I use every day.

Building with AI

Claude Code and Copilot as part of the workflow, not a novelty. Everything on this domain was built with these tools in mind.

Applied security engineering

Threat modeling, encryption architecture, and honest documentation of what a system does and doesn't protect against — practiced end-to-end on Vault, a zero-knowledge password manager I built and audited myself.

Elsewhere

ResumeMy CV as a live site rather than a PDF attachment — built to stay current and read well on a phone.VaultA self-hosted, zero-knowledge password manager. Master password never leaves the browser; the server only ever sees ciphertext it can't decrypt. Argon2id key derivation, AES-256-GCM encryption, documented threat model, and an end-to-end security audit with its own changelog. Built and audited the way I'd want an enterprise security tool built.GitHubCode, tools, and whatever I'm currently taking apart.LinkedInThe professional version, for anyone who needs it.

Contact

Open to interesting problems — happy to talk detection engineering, Python, or what AI tooling is actually good for.

Save contact (.vcf)