I am Moană Ștefănuț-Cornel (@stefanutc1), an Enterprise Systems Architect, Hybrid Cloud Infrastructure Engineer, and Cybersecurity Threat Intelligence Specialist (DFIR & Incident Management), currently completing a B.Sc. in Business Informatics at the University of Craiova — Faculty of Economics and Business Administration (FEAA, 2024 – 2027).

With continuous hands-on software and systems engineering leadership since 2015 (10+ years of operational delivery, preserved in the stefanutc1/old archive), my engineering practice is anchored around three core corporate and institutional pillars:

• Mission-Critical Financial Core Systems (Bachelor's Thesis @ FEAA): Engineering and validating an enterprise-grade Core-Banking Transaction Engine & PCI-DSS v4.0 Payment Gateway featuring a PostgreSQL ACID Double-Entry General Ledger (SELECT ... FOR UPDATE pessimistic concurrency control & SERIALIZABLE isolation), Java 17 (Spring Boot 3.2) microservice mesh, automated tokenization, Python FastAPI real-time fraud risk scoring, and Wazuh SIEM/XDR threat detection verified across 5 automated MITRE ATT&CK adversarial scenarios.
• Corporate Incident Response, Threat Intelligence & Forensic Disclosure: Reverse-engineering sophisticated distributed phishing and financial fraud operations (e.g., Media Galaxy Brand Spoofing / yiyangsaas.com C2), analyzing Browser-in-the-Middle (BitM) session hijacking (Steam OpenID) and real-time operator vishing relays (Revolut OTP Interception), leading to official National Cybersecurity Directorate (DNSC) Incident Notifications & Takedowns (#178465).
• Tier-3 Hybrid Datacenter Infrastructure & Zero-Trust Governance: Designing, provisioning, and operating a self-hosted 4-node bare-metal datacenter cluster (Proxmox VE 9.2, OpenMediaVault 7 Enterprise Storage, Apple Silicon ARM64 Compute, Kubernetes k3s Edge Worker), governed by 5 Zero-Trust OPNsense 24.7 802.1Q VLANs, 57 Terraform IaC modules, 18 Ansible roles, and continuous DevSecOps verification gates.

1. [DOSSIER-01] · Forensic Analysis of the "Media Galaxy" E-Commerce Fraud Syndicate — Infrastructure Attribution & DNSC Takedown #178465
   Decompiling the 8-stage payment skimming and 3D-Secure OTP intercept engine (yiyangsaas.com / 23.224.199.13), followed by coordinated inter-agency takedown via the Romanian National CSIRT (DNSC).
2. [DOSSIER-02] · Enterprise Core-Banking Architecture: ACID General Ledger, PCI-DSS v4.0 Compliance & SIEM Defense-in-Depth
   Architectural breakdown of the FEAA Bachelor's Thesis platform: mathematical IBAN MOD-97 / Luhn verification, double-spend race condition elimination, and SIEM correlation against 5 MITRE ATT&CK vectors.
3. [DOSSIER-03] · Engineering a Tier-3 Hybrid Datacenter: Proxmox VE 9.2, 5-VLAN Zero-Trust Segmentation & GitOps IaC
   Operational design of a multi-node bare-metal compute fabric (192.168.1.240, .181, .196, .150), kernel ZRAM memory governance, and zero-cost multi-cloud policy enforcement.
4. [DOSSIER-04] · Comparative Analysis of Multi-Factor Authentication Bypasses: Steam OpenID BitM vs. Revolut Real-Time Vishing Relays
   Technical evaluation of modern adversary tactics targeting session tokens and automated OTP relay channels, coupled with enterprise detection engineering.
5. [DOSSIER-05] · Decompilation and Vulnerability Assessment of Fraudulent "Task Optimization" Platforms: /api/v1/site/config Exploits
   Forensic reverse-engineering of deceptive financial web APIs, identifying backend authentication bypasses and SQL injection vectors.
6. [DOSSIER-06] · InvataCyber.ro CTF (19.09.2026) — Comprehensive Technical Writeup (3/3 Solved · 100% Score): Stored XSS, Blind SQLi & SSTI
   Offensive security walkthrough and 11 automated exploit scripts in Python/JavaScript executing boolean oracle extraction and template injection to RCE.
7. [DOSSIER-07] · From Distributed Multiplayer Engines in 2015 to Enterprise Hybrid Cloud: Over a Decade of Systems Engineering
   Retrospective evaluation of early concurrent programming, systems design decisions, and architectural evolution across 10+ years of software delivery.

                         [ Enterprise WAN / Cloudflare Zero-Trust Perimeter ]
                                                  │
                                ┌─────────────────▼─────────────────┐
                                │   OPNsense 24.7 Firewall Router   │
                                │ 5 VLANs: MGMT·PROD·CYBER·NAS·IOT  │
                                └─┬──────────┬──────────┬─────────┬─┘
                                  │          │          │         │
                ┌─────────────────▼─┐  ┌─────▼──────────▼─┐  ┌────▼────────────────┐
                │ NODE-1: pve       │  │ NODE-2: omv-nas  │  │ NODE-3 & NODE-4     │
                │ 192.168.1.240     │  │ 192.168.1.181    │  │ .196 (ARM64 pve2)   │
                │ Proxmox VE 9.2    │  │ OpenMediaVault 7 │  │ .150 (k3s Worker)   │
                │ 20+ VM/LXC · SIEM │  │ NFSv4/SMB3 · ZFS │  │ Cilium CNI · ESP32  │
                └───────────────────┘  └──────────────────┘  └─────────────────────┘

• 🌐 Enterprise Portal & Technical Publications: https://stefanutc1.github.io
• 🎓 Institutional Affiliation: University of Craiova · Faculty of Economics and Business Administration (FEAA) — B.Sc. in Business Informatics (2024 – 2027)
• 🏛️ Datacenter Infrastructure Portal: https://stefanutc1.github.io/infrastructure/
• 📫 Institutional Email: moana.stefanut.f8p@student.ucv.ro
• 📍 Corporate Headquarters / Location: Craiova, Romania