Mikołaj Kołodziej Penetration Testing / SOC internship candidate
PL

Technical

Education

Hands-on labs and isolated WordPress instances back the vulnerability research shown in Disclosures and Findings.

01 Technical

Education

Cybersecurity — CBE of IT systems (engineer)

Wrocław University of Science and Technology (PWR)

In progress

October 2024 — February 2028 (expected)

Engineering thesis

Engineering thesis topic to be confirmed later in the programme.

Highlights

Grade average
4.62 / 5.0 over the first two years
Programme
Engineer (inżynier), specialisation Cyberbezpieczeństwo — CBE systemów informatycznych

Key coursework

Relevant coursework will be listed here once confirmed.

Hands-on labs and isolated WordPress instances back the vulnerability research shown in Disclosures and Findings.

02 Toolkit

Skills, training and languages

A conservative snapshot of tools and foundations from CCNA, web labs and reporting.

Web security (developing)

4

Honest beginner / intermediate — lab research, not a claim of full-time pentester seniority

  • Burp Suite Proxy and manual request inspection in lab work
  • PortSwigger Web Security Academy In progress — core web vulnerability classes
  • WordPress plugin review Reading PHP for auth, REST and upload issues
  • OWASP basics Common web risks and testing mindset

Networking

4

Grounded in completed CCNA Academy coursework

  • CCNA switching & routing Switching, Routing, and Wireless Essentials
  • CCNA enterprise networking Enterprise Networking, Security, and Automation
  • Wireshark (basics) Packet inspection for coursework and labs
  • Linux networking Day-to-day lab hosts and service configuration

Platforms & lab

4

Environment used for research and study

  • Linux Primary lab and study environment
  • WordPress / WooCommerce labs Isolated local instances for plugin research
  • Docker (basics) Spinning up disposable test stacks
  • Git / GitHub Versioning notes and this CV site

Reporting & soft skills

4

Where Controltec documentation work and disclosure reports overlap

  • Technical writing Clear structure for developers and vendors
  • Coordinated disclosure Private report first; public text without exploit PoCs
  • CVSS 3.1 Severity scoring aligned to demonstrated impact
  • Remediation notes Actionable fix guidance, not just a bug title

Training, certificates and platforms

  • CCNA: Enterprise Networking, Security, and Automation Cisco Networking Academy · completed
    completed
  • CCNA: Switching, Routing, and Wireless Essentials Cisco Networking Academy · completed
    completed
  • PortSwigger Web Security Academy Web vulnerability labs · in progress
    in progress
  • NSEC-MST-08-CZ0730 Cisco · in progress
    in progress
  • AWS Academy Cloud Security Foundations AWS Academy · in progress
    in progress
  • CCSK (planned) Cloud security · optional next step
    planned

03 — Contact

Looking for a penetration testing internship (SOC secondary)

I can walk you through any report, the lab methodology behind it, and how I document findings for vendors.

Open to internship opportunities — timing flexible

Get in touch [email protected]

I reply fastest by email. Happy to walk through any report, the methodology, or how I document findings.

Disclosure policy & safe harbor →