Denis Strelnikov Email & Phone Number

Riga, Latvia

• Designed and championed an Application Security Pipeline that was used by 300+ devs and adopted across over 100 business-critical repositories. This initiative successfully eliminated critical vulnerabilities and reduced the number of high-risk vulnerabilities by 50% within the first year of implementation.• Played a key role in administering the bug bounty program: processed tens of vulnerabilities, incorporated a few new company assets, liaised with external hackers, and supported the development team's remediation process.• Crucial contributor to both external and internal penetration tests: adhered to compliance requirements, managed vulnerabilities, prepared environments, and maintained clear communication with all stakeholders.• Actively tailored Web Application Firewall (WAF) rules to align with evolving web application security threats(like log4shell), ensuring robust defense mechanisms.

Riga, Latvia

St Petersburg, St Petersburg City, Russia

• Proficiency in both manual and automated penetration testing for networks, system infrastructures, and especially web applications.• Demonstrated ability to effectively communicate complex security findings to stakeholders of varying technical backgrounds, thereby fostering a culture of cybersecurity awareness within the organization. Good report-writing skills.• Proficient in using industry-standard penetration testing tools such as Metasploit, Nessus, and Burp Suite for detailed security audits.• Dedicated to keeping abreast of emerging security vulnerabilities and advancements in penetration testing techniques, underscoring a commitment to lifelong learning within the fast-paced field of cybersecurity.

St Petersburg, St Petersburg City, Russia

• Expertise in reverse engineering Android applications, with a focus on exploring prevalent protection strategies for contemporary mobile apps.• Investigated technical opportunities for creating secure, anonymous telecommunication solutions within the SS7 network and the broader Internet infrastructure.• Led the development of a comprehensive vulnerability scanning framework to enhance system security.