Professional title, definitely. Certified human, hopefully.

Goran Dermanovic

Information Security Architect at AppLovin — which sounds very official until you realize the job is: worry structurally about everything, so nobody else has to. Born in Zagreb, financed and defended in Berlin.

Systems thinker Christian Father of two Bass-playing metalhead Incurable distro-hopper Recovering perfectionist

Connect on LinkedIn →

Day job (the serious part)

I design information security for a living — currently as an Information Security Architect at AppLovin in Berlin. Before that I was Information Security Officer at auxmoney, and before I worried about other companies' data I was a developer and CTO at Kuelap, where I got to build things instead of just defending them. In plain language: I build the rails that keep systems and money moving, and the handrails that stop them falling off.

Security is a job where "boring" is the highest compliment — the quieter I am, the better it's going. But let's be honest about what it means in practice:

Education: M.A. in Theology from the University of Ljubljana, then a doctoral candidate in the Theology department at the Rheinische Friedrich-Wilhelms-Universität Bonn. Yes, the person defending your data studied theology — I even started a doctorate in it. It turns out "humans are fallen and will disappoint you" is basically the whole threat model.

The rest of me (the less serious part)

Of the familyI'm a father of two, which means my threat-modeling skills have a home turf: nothing on earth is less predictable than a determined child negotiating for more screen time. I've built a whole security mindset around surviving it.
Of the soulI'm a Christian. I studied theology seriously, wrestled with it my whole life, and I still believe the deepest truths are best approached in the company of everyone else — believers and skeptics alike. My threat model includes the human soul.
Of the musicI've loved music my whole life — I came up on Iron Maiden and Judas Priest, and I've played bass since 8th grade. Security had to get in line behind a healthy obsession with a good riff.
Of the packI have three dogs. I report that they are all good dogs, and by "good" I mean at least one of them has strong opinions about the unfairness of the mail system.
Of the keyboardI love Linux and I am an incurable distro-hopper. Compromising on a desktop environment is, to me, philosophically ambiguous. My machines and I have an understanding.
Of the shelfI read constantly — theology, philosophy, systems theory, history. If it explains how anything connects to anything else, I'm in. The pile beside my bed is a public safety hazard and I will not apologize for it.
Of the roadI've lived in at least 16 cities and moved across Europe chasing work, study, and life — Zagreb where I was born, Ljubljana where I studied, Bonn where I began a doctorate, Frankfurt and Berlin where I've built my career, and Poland where I fell back in love with engineering. Somewhere along the way I made friends on every continent.

Interests in one breath: music, art, religion, philosophy, business — and I can't actually keep them separate. My whole sense of the world is one big interconnected system, and I keep trying to write my way to the middle of it.

The philosophy, translated

Somewhere in the corporate-detritus of my career there is a document called Leadership Philosophy: The Flow, full of words like "holistic" and "collective intelligence." Here is the honest translation:

Good organizations, like good rivers, are just water flowing downhill without getting stuck. My entire job is removing the boulders — the unclear messages, the silos, the fear, the unpatched server — and then getting out of the way and letting capable people work. I borrowed some of this from the Taoists (flow), some from the Buddhists (right speech), and most of it from Christianity's ancient, hard-won wisdom about how broken and how redeemable people are, all at once.

A leadership-and-security philosophy that rests on the conviction that systems work when the humans in them are treated like humans. It's possible this is less a philosophy and more me agreeing with everyone and calling it strategy. You decide.

Where I came from

I was born in Zagreb in 1974, back when the map still said Yugoslavia, and raised in New Zagreb — an eight-storey building full of kids, with summers spent at the family house on the Adriatic coast. I came up in a family of entrepreneurs who cared a lot about business, money, and real estate. My father was a WWII veteran, salesman, and manager; my mother ran her own business after the Yugoslav war cost her a job. From them I got the uncomfortable inheritance that money is a thing you build, and that you never get anywhere by waiting to be handed something.

That instinct went straight into the work. My early career (2000–2015) was fifteen-plus years of software development and IT consulting in finance:

People think security people and entrepreneurs are opposites. That's wrong — both are just adults refusing to leave the outcome to someone else, and both my families taught me that. The entrepreneurial one I was born into, and the one I built for myself.

In summary

I am a systems nerd who likes humans, a theology graduate who runs security, and a serious professional who will discuss at length the correct bass setup for maximum doomy tone. I've spent my career holding other people's secrets and my own children's attention, and I still cannot quite figure out how to talk to myself with the clarity I demand from everyone else. That, I suspect, is the real job — in disguise.

I keep six tabs of world wisdom traditions open at all times, and my spiritual practice is trying to remember that they all say the same thing.