Cristian Trifan

CRISTIAN TRIFAN

CYBERSECURITY STUDENT | CEH

about.exe
root@cristian:~$ cat profile.txt

IT student at NHL Stenden with hands-on experience in penetration testing, vulnerability assessment and secure systems. Certified Ethical Hacker (CEH) through EC-Council (April 2026).

Works well in diverse teams and enjoys solving complex security challenges across web applications, mobile clients, IoT devices and industrial control systems.

Recently completed an internship at B&S, migrating an internal desktop application to a modern web-based system and building full-stack features in an Agile/Scrum team.

Also experienced in software development with TypeScript, Angular, React, ASP.NET Core and Node.js through university and personal projects.

Check out my projects on GitHub

// SKILLS

Security

  • Penetration Testing & Vulnerability Assessment
  • Threat Modelling (OWASP Threat Dragon)
  • Web, Mobile & IoT Security
  • OT/ICS Security
  • Security Documentation & Pentest Reporting

Languages

  • Python, JavaScript, TypeScript, C#
  • Java, C++, Kotlin

Frameworks

  • ASP.NET Core, React, Angular
  • Express.js, Node.js, Next.js
  • Flutter, React Native

Databases

  • PostgreSQL, MySQL, MongoDB
  • Firebase, SQL

DevOps & Tools

  • Git, GitHub, GitLab, Azure, CI/CD, Jira
  • ADB, apktool, jadx, mitmproxy

Practices

  • REST APIs, Scrum, Agile
  • Front-end & Back-end Integration
  • Problem-Solving & Debugging

Spoken Languages

  • Romanian (C2)
  • English (C2)
  • Dutch (A2)

// EDUCATION

education.log
2023 - Present

NHL STENDEN UNIVERSITY OF APPLIED SCIENCES - THE NETHERLANDS

  • Study program: Information Technology
  • Focus: Software Development, Web & Mobile Development, Database Engineering
  • Minor: Certified Ethical Hacking (EC-Council), penetration testing, vulnerability analysis, web app security, cryptography
  • Minor: Secure Programming, secure software development, threat modelling, mobile application security
2019-2022

"SPIRU HARET" NATIONAL COLLEGE (HIGHSCHOOL) - ROMANIA

  • Study program: Computer Mathematics
  • A study program based on: Mathematics, IT, Physics and Chemistry

// WORK EXPERIENCE

experience.log
Sep 2025 - Jan 2026

B&S - Delfzijl, Groningen, Netherlands

Software Engineer Intern

  • Migrated an internal desktop application to a modern web-based system
  • Built front-end components and integrated them with back-end services
  • Worked in an Agile/Scrum team on feature delivery, code reviews and sprint planning
2019 - 2021

Karomtec SRL - Romania

IT Support - Part Time

  • Installed and configured workstations
  • Maintained system performance and resolved hardware, software and network issues
  • Provided remote support for off-site troubleshooting and issue resolution

// PROJECTS & CERTIFICATIONS

Security Projects & Programmes

BestieAYG - Android Pentest

Secure Programming minor, NHL Stenden, Jun 2026

  • Internal penetration test of a team Android application based on an OWASP Threat Dragon model
  • Static analysis (jadx, apktool), MITM testing (mitmproxy) and local data extraction (ADB)
  • Identified and documented findings with remediation recommendations in a formal pentest report

Hack.FRL 2026

NHL Stenden, Leeuwarden, Apr 2026

  • Live cybersecurity event testing systems for Frisian municipalities and public organisations
  • Won Best Documented Hack and Most Creative Hack

Hack Your Device

RUN-EU BIP, Apr - May 2026, Leiria, Portugal

  • Conducted an IoT device penetration test in an international student team
  • Diagnosed IoT-related threats through hands-on testing and network analysis
  • Delivered a formal pentest report and presentation

Inside Industrial Defences

RUN-EU BIP, Feb - Mar 2026, Emmen, Netherlands

  • ICS/SCADA and OT cybersecurity training with NHL Stenden, Howest and Polytechnic University of Leiria
  • Hands-on PLC/OT testbed work including network mapping and Modbus/TCP analysis
  • Offensive/defensive exercises covering detection, containment and incident response

GitHub Projects

AI Question Generator

TypeScript, Next.js, NestJS, Azure, OpenAI

University company project that analyses compliance documents and generates audit questions with AI, exporting results to Excel, Word and PDF.

Open Fleet Map

Python, Flask, React, PostgreSQL

Maritime vessel tracking system with a Flask API and React frontend for real-time AIS ship monitoring, historical data and interactive map visualisation.

CyberSafe Quiz App

React Native, Expo, JavaScript

Mobile quiz app that teaches cybersecurity awareness, covering phishing, passwords, social engineering, 2FA and safe online behaviour.

SSW Game Platform

JavaScript, Node.js, React Native, Firebase

NHL Stenden gamified learning platform with an admin dashboard for educators and a mobile app for quizzes, puzzles, quests and location-based challenges.

SmartLockSystem

Python, Raspberry Pi, Computer Vision, NFC

Smart access control system using facial recognition and NFC authentication, with desktop and Raspberry Pi applications for secure door unlocking.

BattleBot Purpie

Arduino, C++, Embedded Systems

Autonomous maze robot for the BattleBot Race Challenge, using ultrasonic, line-following and obstacle-avoidance sensors to complete the line race section.

OUI-Caffee

HTML, CSS, Responsive Web Design

Front-end website for a coffee shop brand, focused on layout, styling and responsive design fundamentals.

Certifications

Certified Ethical Hacker (CEH)

EC-Council, Issued Apr 2026

  • Certification Number: ECC0381492657
  • Penetration testing, vulnerability analysis, web app security and cryptography
  • Accredited ISO/IEC 17024 personnel certification

CompTIA Security+ (SY0-701)

Training, Jason Dion, Udemy

  • Fundamental Security Concepts
  • Navigating Threats, Vulnerabilities, & Remedies
  • Decoding Security Architecture
  • Mastering Security Operations
  • Guiding Security Program Management & Oversight

Ethical Hacking

Training, Zaid Sabih, Udemy

  • Network Hacking
  • Gaining Access
  • Post Exploitation
  • Website/Web Application Hacking

React - The Complete Guide

Training, Maximilian Schwarzmüller, Udemy

  • Built interactive UIs with React components, props, and state
  • Used Hooks, Fragments, Portals, and React Router for advanced features
  • Managed global state with Redux Toolkit and handled HTTP requests
  • Styled apps, added authentication, and deployed React projects with TypeScript

JavaScript - The Complete Guide 2025

Training, Udemy, Issued Jun 2025

  • Beginner + Advanced JavaScript concepts
  • Credential ID: UC-d7cb856b-9db6-44fa-b62d-893c8eab5e3d

// CONTACT

Emmen, Drenthe, The Netherlands