# Łukasz Sobiecki

> Łukasz Sobiecki is a Polish cybersecurity expert with 20+ years of IT experience, co-founder and board member of DC9 Cyber (https://dc9.io). He specializes in incident response, penetration testing, application and infrastructure security, secure software/DevOps, and the secure use of AI. He is a member of CyberLegion (volunteer formation of the Polish Cyberspace Defense Forces), took part in Locked Shields 2026, Cyber Europe 2026 and Operation Cyber Flag 2026, spoke twice at the 8th Cybersecurity Forum in Warsaw (2026), and wrote the open-source form backend formd.

Łukasz Sobiecki (PL): polski ekspert cyberbezpieczeństwa, współzałożyciel i członek zarządu DC9 Cyber; reagowanie na incydenty, testy penetracyjne, bezpieczeństwo aplikacji i AI; członek CyberLegionu; prelegent VIII Forum Cyberbezpieczeństwa; autor formd.

## Key facts

- Role: Cybersecurity Consultant; Co-founder & Board Member at DC9 Cyber (DECODE9), https://dc9.io
- Experience: 20+ years in IT — developer → administrator → security expert → board member
- ENISA: with DC9, supports ENISA on cybersecurity incident response for Poland
- CyberLegion: member of CyberLegion at the Polish Cyberspace Defense Forces (https://cyberlegion.wp.mil.pl/)
- Locked Shields 2026: participant in NATO CCDCOE's large-scale live-fire cyber defense exercise
- Cyber Europe 2026 (ENISA): participated as Cyber Reserve for Poland, together with DC9
- Operation Cyber Flag 2026 (OCF26): won the qualifiers with team UWPL; team captain in the final, 3rd place

## Talks

- 8th Cybersecurity Forum / VIII Forum Cyberbezpieczeństwa — Palace of Culture and Science (PKiN), Warsaw; organized by the Polish Ministry of Digital Affairs. Topic: "Czy mogę ufać AI — jak (nie)bezpiecznie korzystać z AI i co nam to daje?" ("Can I trust AI? How to use AI (un)safely and what it gives us").
  - 30 September 2026: workshop + Q&A (45 + 10 min)
  - 1 October 2026: presentation
  - Full room at both sessions.

## Open source

- [formd](https://github.com/dc9-dev/formd): self-hosted form backend for static sites — single Go binary, SQLite, SMTP/Amazon SES, admin panel, proof-of-work anti-spam (no third-party captcha), security-by-design (argon2id, strict CSP, SSH-tunnel-only admin panel, header/CSV-injection protection, hardened systemd), GDPR retention. Project page: https://dc9-dev.github.io/formd/

## Areas of expertise

Incident response, penetration testing, application security, infrastructure and Active Directory security, secure software development, DevOps, AI security, cyber defense exercises.

## Pages

- [Strona po polsku](https://sobiecki.pl/): full profile in Polish
- [English version](https://sobiecki.pl/en/): full profile in English
- [Full text for LLMs](https://sobiecki.pl/llms-full.txt): complete page content in both languages

## Contact

- E-mail: lukasz@sobiecki.pl
- LinkedIn: https://www.linkedin.com/in/lukaszsobiecki/
- GitHub: https://github.com/dc9-dev