01 — Founder, TIA Enterprise
Almost twenty years in networking, cybersecurity, and security architecture — now building systems where AI agents investigate, document, and decide without losing the audit trail.
02 — Selected work
Filter by discipline. Hover a card for the brief; follow the link when there is a public surface.
Autonomous security operations. Specialized AI agents in continuous detection, OSINT, and incident response — with an audit trail a human can actually check.
01 · AI · 2026
Autonomous security operations. Specialized AI agents in continuous detection, OSINT, and incident response — with an audit trail a human can actually check.
OSINT and threat-intelligence surface for TIA. Collection, correlation, and reporting designed for evidence, not dashboards.
02 · Intelligence · 2026
OSINT and threat-intelligence surface for TIA. Collection, correlation, and reporting designed for evidence, not dashboards.
A structured state-injection framework for behavioral continuity across stateless LLMs — without modifying model weights.
03 · Research · 2026
A structured state-injection framework for behavioral continuity across stateless LLMs — without modifying model weights.
A working partner that pushes back — and remembers why. Role-specific consistency for ChatGPT, Claude, Copilot, and Gemini. No install, no login.
04 · AI · 2026
A working partner that pushes back — and remembers why. Role-specific consistency for ChatGPT, Claude, Copilot, and Gemini. No install, no login.
Security architecture, AI security, OSINT, application review, and enterprise risk reduction for Czech and European organizations.
05 · Consulting · 2026
Security architecture, AI security, OSINT, application review, and enterprise risk reduction for Czech and European organizations.
Presales architecture and delivery across Imperva, Tufin, Radware, Armis, SentinelOne, Forcepoint, and SailPoint for partners and customers in Czechia and Slovakia.
06 · Security · 2018–26
Presales architecture and delivery across Imperva, Tufin, Radware, Armis, SentinelOne, Forcepoint, and SailPoint for partners and customers in Czechia and Slovakia.
Datacenter and WAN operations across Prague, Kuala Lumpur, and Ashburn — incident command for a thirty-country legacy network.
07 · Networking · 2013–16
Datacenter and WAN operations across Prague, Kuala Lumpur, and Ashburn — incident command for a thirty-country legacy network.
EU-wide voice and data operations for DHL as Telefónica single supplier — incidents, orders, changes, and SLA stewardship from Prague.
08 · Networking · 2009–13
EU-wide voice and data operations for DHL as Telefónica single supplier — incidents, orders, changes, and SLA stewardship from Prague.
03 — About
I have spent almost twenty years in networking, cybersecurity, technical presales, and security architecture — working with partners, vendors, and customers across the Czech enterprise market, for both multinational and local companies.
Today I am building TIA Enterprise: an AI-native cybersecurity and intelligence company focused on agentic workflows, evidence-driven security analysis, OSINT, application security review, and human-governed automation.
The work sits at the intersection of cybersecurity, artificial intelligence, governance, and operational execution. I design systems where AI agents can assist with research, analysis, reporting, remediation, and decision support without losing traceability, accountability, or human control.
The goal is simple: tools and workflows that make security work faster, clearer, more defensible, and more useful for real organizations.
Full curriculum on LinkedIn04 — Practice
Each line carries what backs it. Where there is no evidence I can point at, the line is not here — the full keyword surface is on LinkedIn.
01
Presales and delivery across Imperva, Tufin, Radware, Armis, SentinelOne, Forcepoint and SailPoint for customers in Czechia and Slovakia, 2018–26.
Incident command for a thirty-country network, run from Prague, Kuala Lumpur and Ashburn.
Adversarial pass first — a finding is attacked before it is written down, and the attempt is part of the report.
A control set mapped in public to ISO 27001, NIS2 and GDPR — published, not kept internal.
Also: Zero Trust · SIEM / EDR / XDR · Identity & access · MITRE ATT&CK · OWASP Top 10
02
Passive reconnaissance with zero packets to the target. Each report names the indexes that were read and the ones that were not, and carries a hash the recipient can recompute.
An agent fleet in daily operation where the human is the decision node, not the courier.
Every finding names its source and its coverage limit. What was not read is printed as not read.
A daily public cut of security sources, weekends included, showing what was discarded next to what was published.
Also: Agentic workflows · LLM security · OWASP LLM Top 10 · Stateful identity (EFS) · Threat intelligence
03
Datacenter and WAN across Prague, Kuala Lumpur and Ashburn; thirty-country legacy estate, 2013–16.
EU-wide voice and data for DHL as Telefónica's single supplier — incidents, orders, changes and SLA stewardship.
Vendor architecture turned into a customer decision — including what the customer should not buy.
Written so a non-technical decision maker can act, with the uncertainty stated rather than smoothed.
Also: Network engineering · WAN / datacenter · Palo Alto NGFW · Cisco WSA · ITIL · Risk reduction
Languages
Tenure
2026 —
Founder / CEO
TIA Enterprise
Prague
2026
Cyber Security Consultant
DNS a.s.
Prague
2018 — 26
Senior Security Consultant
CLICO Czech Republic & Slovakia
Prague
2016 — 18
Security Operations Specialist
NNIT
Prague
2013 — 16
Network Engineer
DHL
Prague · KL · Ashburn
2009 — 13
Network OSS / Senior Agent
Telefónica
Prague
05 — Correspondence
Consulting, architecture reviews, or a conversation about agentic security. I read every note.
LinkedIn