Junior Security Consultant
Theklis Stefani
Theklis is a Junior Security Consultant at Sentrium, specialising in web application penetration testing. His work involves testing real-world applications to identify and validate vulnerabilities, demonstrate potential exploit paths, and provide clients with practical recommendations to improve their security posture. Theklis holds an MSc in Cyber Security and certifications including PT1 (TryHackMe) and eJPT (INE Security).
Before moving into security, Theklis worked for two years as a software engineer, gaining a strong understanding of how developers think and how security fits into development processes. Over the past six months at Sentrium, Theklis has been performing web applications and API penetration tests across a range of sectors. He is driven by curiosity and the desire to understand how things work, enjoying the process of turning vulnerabilities into opportunities to make systems stronger and more resilient.
Connect with Theklis
Areas of expertise
- Web application penetration testing
- API security
- Infrastructure security
Writing focus
Theklis writes about application security, penetration testing techniques, and industry challenges. His focus is on sharing practical insights and raising awareness of common security issues to help teams improve their security posture.
Theklis' work
-
-
April 16, 2026
Windows IKE Service Extensions Vulnerability Enables Remote Code Execution (CVE-2026-33824)
Read more arrow_right_alt
-
February 4, 2026
Disclosure: SupportCandy Ticket Attachment IDOR (CVE-2026-1251)
Read more arrow_right_alt
-
January 12, 2026
Critical jsPDF Vulnerability Enables Arbitrary File Read in Node.js (CVE-2025-68428)
Read more arrow_right_alt
-
January 8, 2026
The boardroom case for penetration testing: Risk, responsibility, and resilience
Read more arrow_right_alt
-
December 17, 2025
DeepChat AI agent XSS-to-RCE via Mermaid and Electron IPC
Read more arrow_right_alt
-
November 18, 2025
Google Chrome V8 “type-confusion” zero-day vulnerabilities (CVE-2025-13223 & CVE-2025-13224)
Read more arrow_right_alt
-
October 20, 2025
Penetration testing vs red teaming: What’s the difference?
Read more arrow_right_alt
-
September 3, 2025
Will penetration testing disrupt my business operations?
Read more arrow_right_alt