Tomasz Chyła
InfoSec Specialist · Vulnerability Governance → AI Security · Container Security
I am relentlessly curious. I cannot help but dig deeper into technology and into how systems really work. Right now that means AI, container security, and DevOps. I do not treat them as separate domains; I look for the points where one explains the other.
On the other side is Adlerian psychology. I have noticed that the way people design systems reflects how they think about themselves and others. I want to understand the full picture: technology, plus the people who build and use it.
Skills
Experience
- Identify, assess, and prioritize security vulnerabilities across IT environments, from traditional infrastructure to container platforms.
- Translate complex vulnerability assessments into practical business insight for stakeholders.
- Act as a subject matter expert and strategic advisor for vulnerability management, working with technical teams, leadership, and cross-functional stakeholders.
- Build and maintain comprehensive VM strategies, governance frameworks, and operational processes.
- Lead container security vulnerability governance, including stakeholder coordination, scan result interpretation, and continuous process improvement.
- Identified, assessed, and prioritized security patching needs.
- Informed stakeholders about new security patches and required actions.
- Developed and maintained strategies and processes for effective patch governance.
- Improved and developed the existing vulnerability management process.
- Administered the ESET ERA 7 console for approximately 1,500 endpoints, including policies, reporting, and threat analysis.
- Administered WSUS servers; tested and deployed updates to production environments.
- Scanned internal and external network vulnerabilities with Qualys Guard, from scan execution through remediation.
- Used nmap and Burp Suite to analyze infrastructure vulnerabilities alongside Qualys.
- Created and enforced security policies and organizational documentation.
- Managed Active Directory, network infrastructure, and VMware virtualization.
- Administered Microsoft 2008-2012 servers, backups, and end-user support.
- Delivered professional IT solutions for businesses through my own company for over 11 years.
Certifications
- Vulnerability Management: Assessing the Risks with CVSS v3.1
- Linux for Security Experts
- ESET Client & Network Security Administrator
- Implementing the NIST Risk Management Framework
- Web Security: User Authentication and Access Control
Education
Contact
Open to conversations about security, AI, automation, and what sits at the intersection of those worlds.