Boutique AI & Security Consulting
SephiraSec combines 12+ years in modern C++ and systems engineering with hands-on work in network and email security, vulnerability management, and DORA / NIS2 / ISO 27001-aligned security architecture for financial institutions and critical infrastructure.
Contract · Consulting · Full-time · Remote-friendly
Based in Vienna · working with banks, financial service providers and critical infrastructure.
Where intelligence meets security. SephiraSec focuses on a few areas – and goes deep.
Design and implementation of security automation, enrichment and analytics: log pipelines, anomaly detection concepts and AI-assisted triage, backed by hands-on AI Engineering studies.
Design and optimisation of vulnerability management programmes in enterprise environments – from scan architecture to risk-based remediation workflows, with vulnerability management as a central discipline.
Support for security architecture, documentation and processes aligned with DORA, NIS2 and financial-sector expectations – with a focus on practical implementation and BSI / ISO 27001 good practices.
Over 12 years of modern C++ across automotive infotainment, slot gaming systems, algorithm-heavy components and network security products – from architecture to implementation.
12+ years of hands-on depth across engineering, security and AI.
Languages & Engineering
Network & Email Security
AI, Data & Automation
Standards & Frameworks
Vulnerability & Risk
Outcome-driven programs that blend secure software engineering, high-performance systems and defensive architecture for teams that need confidence.
Focused review of AI controls, detection coverage, firewall/email protections and vulnerability management to surface prioritised risks with ready-to-run fixes.
Hands-on sprint to align security capabilities, documentation and playbooks with DORA expectations.
Continuous leadership for security, risk and AI governance with measurable outcomes.
Hands-on software development and engineering leadership to ship reliable, secure and performant products with confidence.
A pragmatic, outcome-driven delivery model designed for regulated environments.
We clarify your environment, constraints, and success criteria. You get a written scope and deliverables list.
We collect facts fast: tooling, coverage, controls, data flows and evidence needed for audits and stakeholders.
Hands-on engineering: automation, dashboards, playbooks and hardening. No slideware—production-ready output.
You receive runbooks, ownership, and KPI definitions so improvements remain measurable after delivery.
Examples of what clients can expect—shared in an anonymised form due to NDAs.
Improved scan coverage, reduced noise, and a risk-based remediation workflow with executive-ready KPIs.
Control mapping, evidence packs, and runbooks aligned with DORA/NIS2 expectations and internal governance.
Automation around existing tools (SIEM/SOAR, ticketing, vuln platforms) to reduce triage time and improve consistency.
Security is never one-size-fits-all. The focus is on environments where failure is not an option.
Banks, payment providers and financial market infrastructure subject to DORA & local regulators.
Organisations where uptime, integrity and incident response are critical to operations.
Teams building products that require secure, performant and reliable C++ and backend components.
Healthcare, manufacturing, legal, retail or any sector where data, systems and processes must be protected — the same rigour, regardless of vertical.
Dipl.-Ing. Dorin-Emilian Avram, MSc
Dorin is an IT Security Expert, C++ engineer and member of a core security team at a European bank. He holds a Bachelor’s degree in Computer Engineering, a Master’s degree in IT Security and is currently studying AI Engineering at FH Technikum Wien, extending a strong software background into modern AI for security.
Over more than a decade he has built and secured automotive infotainment platforms, casino slot systems, network and e-mail security products (including firewalls, secure mail gateways, VPN and SASE) and later worked as a security consultant for multiple clients. Today he focuses on infrastructure and application security – from data centre to cloud – with a strong emphasis on vulnerability management, regulatory resilience (DORA, NIS2, BSI, ISO 27001) and pragmatic defence-in-depth.
Speaks Romanian, English and German · Available for consulting and project-based engagements across the EU.
Contract · Consulting · Full-time · Remote-friendly
Education
Certifications
If you are planning a new security initiative, preparing for DORA or NIS2, or need help designing automation around your existing tools, SephiraSec can help.
Send a short description of your context and timeline – you’ll get a focused reply with concrete next steps and options for collaboration.
