Security · Engineering · Consulting
We help organisations design, operate, and recover secure systems — from board-level direction to pipelines and industrial environments.
About
Fisherman Labs s.r.o. has designed, built and secured systems in Prague since 2012. We pair advisory work with hands-on engineering, so recommendations end up as running systems, not shelfware.
Fisherman Labs is led by Jakub Rybář, Secure Solution Designer, Architect & Engineer. He has worked in IT operations since 2000 and in security for more than ten years.
That includes leading a SOC analyst shift at a global logistics company, and serving as Cyber Security Architect at a university hospital in Pilsen under Czech cyber-security law. He co-founded and ran GuardIoT, an OT/ICS/IIoT security startup. Later work covered DevSecOps for fintech, crypto and media companies, and CERT/SOAR plus security engineering lead work in the gaming sector.
Certifications: GIAC Certified Incident Handler (GCIH) and ITIL Foundation.
Services
From advisory work to hands-on engineering. Pick one area or combine several.
01
Security audits, ISMS policy and threat modeling, aligned with ISO 27k and the Czech Cyber Security Act. We also harden how software gets built, through a secure development lifecycle (SSDLC).
Audits · ISMS · ISO 27k · Threat modeling · SSDLC
02
Incident response service design, hands-on handling and digital forensics, led by a GIAC Certified Incident Handler. Built on SOC, CERT and SOAR experience, with threat intelligence feeding detection.
GCIH · DFIR · SOC/CERT · SOAR · SIEM · MISP
03
Part-time security leadership: strategy, governance, risk management and a roadmap your stakeholders accept. Grounded in his role as Cyber Security Architect at a university hospital in Pilsen — shaping security strategy, governance and stakeholder buy-in — plus GRC across ISO 27k, PCI DSS and SOC 2.
Strategy · Governance · Risk · ISO 27k · PCI DSS · SOC 2
04
Secure CI/CD and SSDLC baselines built on Zero Trust principles, so every change is checked on its way to production. GitLab pipelines, Kubernetes runtime security and GitOps delivery.
GitLab CI · Kubernetes · Falco · Flux · Zero Trust
05
Kubernetes platforms built and run as code, from bare metal and small VPS setups to AWS and Azure, with monitoring and observability in place from day one.
K3s · K8s · Rancher · AKS · EC2 · Ansible · Terraform · Podman
06
Ethical hacking of IT, OT, ICS/SCADA and (I)IoT environments, continuous vulnerability assessment, and anomaly and intrusion detection for networks where availability comes first.
ICS/SCADA · (I)IoT · Vulnerability assessment · IDS
Experience across
Track record
Highlights from regulated and availability-critical environments. Most client names stay confidential, so we describe the sector instead.
Healthcare · Public sector
Cyber Security Architect at the university hospital in Pilsen under the Czech Cyber Security Act: security strategy and governance, a current-to-target-state roadmap taken through to stakeholder acceptance, and one incident-handling framework across IT, physical and cyber security teams.
OT/ICS & IoT
Co-founded and led GuardIoT, a Czech OT/ICS/IIoT security startup. It delivered an MVP and two proofs of concept with Central European municipalities for continuous vulnerability assessment of camera networks.
Logistics
Led an InfoSec analyst shift in the SOC/CDC of a global logistics company: second-level incident handling on the SIEM, security use-case development and a MISP threat-intelligence lab.
Fintech · Crypto · Media · Gaming
Secure CI/CD and SSDLC baselines, Zero Trust-based risk and threat management, and incident response service design for crypto/fintech and media companies. In gaming: DevSecOps and CERT/SOAR subject-matter expert and security engineering lead.
Facing something similar? Let’s talk it through.
Get in touchContact
Short discovery calls are welcome. If you’re mid-incident, say so in the subject line and we’ll prioritise accordingly.
