My journey into cybersecurity is unconventional. I started my career as an Emergency Medicine Doctor in Croatia, later moving to the UK to continue my specialty training with the NHS. The high-pressure environment of the ER taught me to think systematically about complex, ambiguous problems — and to build protocols that work when everything is on fire. Those same skills now drive how I approach incident response playbooks and security architecture.
Today, I serve as Head of Information Security and Technology at Numan and Fractional Head of Product at DevArmor. I apply diagnostic thinking from medicine to threat modeling — the parallels are striking: differential diagnosis is just threat modeling for the human body. Both fields require pattern recognition, risk assessment under uncertainty, and protecting what matters most.
I'm an OWASP Project Co-Leader for the Threat Model Library — the first open-source, structured, peer-reviewed threat modeling dataset. I also co-lead the Threat Modelling Use Cases working group at the Linux Foundation AI & Data. My mission is to democratise security knowledge and make threat modeling accessible to everyone.
Outside of work, alongside with my mother, I co-founded a non-profit in Croatia called DIP, focused on community inclusion — running workshops, activities and mentoring programs for young people with learning disabilities and various types of neurodiversity. I also compete in volleyball in the NVL and London League, and beach volleyball in the UKBT.
