scroll

Cybersecurity engineer with an academic background in software engineering, hands-on DevOps/SRE industry experience, and a competitive history as a former member of Serbia’s national CTF team. Applies broad experience and domain knowledge to build custom cybersecurity solutions across adversary simulation, detection engineering, and automated offensive and defensive operations. Responsibly leverages state-of-the-art AI tools to accelerate workflow without compromising on security, reliability, and maintainability standards.

Experience

Cybersecurity Engineer

Rivian Automotive, Inc.Belgrade, Serbia

DevOps Engineer

Vega ITNovi Sad, Serbia

DevOps Engineer

LambdaWorksNovi Sad, Serbia

Honors & Awards

Participated and contributed to the Serbian Cybersecurity Challenge

Annual national CTF competition organized by Cybersecurity Network Foundation

  • 2nd place (2025 Final) — Member of the team “Panonimusi” that placed 2nd out of 14 teams.
  • 2nd place (2025 Qualifiers) — Placed 2nd out of 142 participants in the qualifiers phase.
  • 4th place (2024 Final) — Member of the team “Panonimusi” that placed 4th out of 17 teams.
  • 1st place (2023 Final) — Member of the team “Panonimusi” that placed 1st out of 17 teams.
  • 3rd place (2023 Qualifiers) — Placed 3rd out of 169 participants in the qualifiers phase.
  • 5th place (2022 Final) — Member of the team “Rafting” that placed 5th out of 16 teams.
  • 2nd place (2022 Qualifiers) — Placed 2nd out of 106 participants in the qualifiers phase.
  • Conducted online training sessions for finalists, sharing practical techniques for solving web challenges. Also held in-person trainings to promote the competition among students at the University of Novi Sad.
  • Developed web and miscellaneous challenges for the 2024 qualification phase.

Member of the Serbian national team in the European Cyber Security Challenge

Annual cybersecurity competition organized by ENISA

  • Represented Serbia in Vienna, Austria (2022) and Hamar, Norway (2023).
  • Part of the extended Serbian national team for ECSC 2024 and 2025 — involved in team trainings and preparation.
  • Specialized in solving web challenges, exploit development, handling DevOps tasks and building tools.

Participated in the national command and staff cybersecurity exercise “Cyber Tesla”
organized by the Serbian Armed Forces.

Skills Summary

  • Docker
  • Kubernetes
  • Helm
  • Terraform
  • Ansible
  • ArgoCD
  • GitHub Actions
  • GitLab CI
  • SemaphoreCI
  • Gitea
  • Fastlane
  • Linux
  • Bash
  • Powershell
  • Nginx
  • Consul
  • Prometheus
  • AWSECS · EC2 · VPC · RDS · Lambda · Cognito · IAM · S3 · …
  • Python
  • Java
  • JavaScript
  • SQL
  • C
  • Flask
  • FastAPI
  • Spring Boot
  • Express.js
  • GraphQL
  • REST APIs
  • WebSockets
  • Redis
  • RabbitMQ
  • Postgres
  • MongoDB
  • BurpSuite
  • Nmap
  • Wireshark
  • Metasploit
  • SQLmap
  • Kali Linux
  • Vue.js
  • HTML
  • CSS

Education

Bachelor with Honours in Electrical and Computer Engineering

Faculty of Technical Sciences, University of Novi Sad
Software Engineering and Information Technologies

Projects

Avala — Exploit Development Framework for Cybersecurity Competitionsgithub ↗website ↗

Personal project

  • Built and maintained a Python framework for developing and deploying exploits in attack/defense (A/D) competitions with the goal of taking the technical burden off the team players. Players can rapidly develop, test, run exploits on their own machines and monitor all the attacks in real-time through a centralized web dashboard.
  • The development of the tool was heavily influenced by the practical experiences and valuable insights gathered by the Serbian National ECSC Team who utilized the tool in multiple A/D competitions.
  • Tech used:PythonFastAPIRabbitMQVue.jsSocket.IOSQLitePostgreSQLRedis

Blog

Writeups and notes on cybersecurity, CTFs, and the things I build.

© Dušan Lazić 2026