Looking for my CV? It prints best from elmartromp.dev/cv/
Skip to contentOpen to Information Security Officer, Security Engineer, and Privacy Researcher roles
Cyber security from SIEM to ISMS. Engineering, governance, and privacy research.
I work on GRCSecurity monitoringPrivacy researchTeaching
Supporting the ISMS and GRC work at Roseman Labs: translating security and privacy requirements into practical controls and clear documentation, leading the internal self-assessment for Cyber Essentials, the UK government-backed certification, and preparing for external security and privacy assessments.
Shaping the SIEM monitoring and use-case strategy with DevOps, and running penetration tests and security reviews whose findings feed back into hardening.
Teaching assistant for Computer Security and Algorithms and Data Structures, with a second-degree teaching qualification in Informatics.
Big data and data mining in my bachelor’s specialisation; statistical and causal inference, information retrieval, and the security and privacy of machine learning in my master’s.
Studying online tracking and the privacy implications of modern web technologies through browser-based measurement.
Project
Client-side measurement of Network Error Logging during my research internship at Radboud Digital Security. A Chromium-based tool records which NEL policies a site and its third parties store, then probes each one: self-expiring nftables DNAT rules redirect the probed host to a local fault server that serves fake error and success responses, so the browser queues reports that never leave the machine.
Putting security and privacy into practice in what I make myself.
Project
A personal site with zero JavaScript, no third-party requests, and a strict Content Security Policy. Built with Hugo and served as static assets from Cloudflare Workers.
Security and privacy requirements only help once they become practical controls and clear documentation.
From SIEM data to browser measurements, I want to see what a system actually does.
Teaching taught me that security only sticks when people understand why it matters.
Experience, education, and the full toolbox, from SIEM and ISMS to teaching. Prints as a clean resume.
Favourite photos and what I get up to outside security: coffee, cooking, baking, running, and music.
What I'm focused on at the moment: work, research, and study. Updated now and then.
Latest note
A personal site doesn't need trackers or a framework. Here is how I kept this one small, private, and locked down.
All notes
Open to Information Security Officer, Security Engineer, and Privacy Researcher roles. Email contact@elmartromp.dev or send me a message on LinkedIn.
