Selected work
- SOC 2 Type I and Type II, HIPAAtrust.daytona.io
Led Daytona's compliance program. The SOC 2 Type II report (2026, unqualified opinion) is available to customers through Daytona's trust center.
- Events calendar for Split and Dalmatiaajme.hr
Gave a lifestyle portal a daily reason to come back: up to about 20 events a day, a weekly pick and clearly labelled sponsored events. A WordPress plugin I built, served from cache in about 100 ms.
- Information system security labsgithub
Offensive and defensive labs for the security course I teach at Aspira: break it first, then defend it.
- Cloud computing labsgithub
The lab environment for the Cloud IT Systems course at Aspira. The container labs open in GitHub Codespaces with one click.
- DevContainers: Enhancing Development and Collaboration in Software Engineeringgoogle scholar
Peer-reviewed paper with A. Skendžić on reproducible, isolated development environments (2026).
Path
Bank CISO first, then nine years on the other side running the systems, and now security again, for AI agents.
- 2010–2016Outsourced CISO for a regulated Croatian bank
- 2017–2026Hrvatski Telekom, from DBA to Head of IT Operations and DevOps
- 2026–CISO & Compliance Officer, Daytona
- Teaching
- Lecturer in cloud computing at Aspira University of Applied Sciences, Split, since 2018. Dean's Award for Excellence in Teaching (2019/2020), ten mentored theses so far, and the course labs are public on GitHub.
- Works on
- AI agent security, sandbox isolation, cloud security, supply-chain and CI/CD hardening, SOC 2 and ISO 27001