Ivan I. Email & Phone Number

Moscow, Ru

Working as an application security analyst at the largest Bank in Russia (our team serves more than 3,500 product development teams)The most popular development languages: Python, Java, C++, Kotlin and etc.Last year I combined the roles of a security analyst and a project manager in our cybersecurity teamResponsibilities:- Advised developers on defects triage by reviewing code and analyzing tools signatures of their possible impact- Using application-analysis tools (SAST CheckMarx, SCA ODC, MAST Stingrey, DAST BurpSuite)- Developed Sber Checkmarx solution in constant communication with the vendor (architecture, roadmap, resolving bug tickets) Setting up tools for Bank applications (creating heuristic rules in Cxl for SAST Checkmarx tool based on products documentation (OWASP Top 10), setting presets based on the threats of the application)- Threat modeling for Sber products- Participation in the development of the concept and methodology for the security quality gate- Creating educational materials and conducting training with Moscow State University (more than 50 people have completed full training, more than 500 people have received express training on information security tools used in the Bank)- Mentoring for the interns of our department (8+ people)- Preparing, scheduling, coordinating and monitoring all aspects in the project- Maintaining project tracking- Fostering a positive team culture- Creating project documentation- Identifing and mitigating project risksAchievements:- The first blocking security quality gate (SAST) has been successfully introduced into the production process- Received certification of appreciation from Sber for achieving high performance 12.12.2021- Most of my interns cope with the current tasks- A project to create a series of dashboards for monitoring violators has been completed

Responsibilities:- Improvement of services- Development of a CRUD application with a RESTful interface- Development of a multithreaded TCP port scanner- TestingTechnical Stack:Java, Spring Boot, Spring Security, JUnit, Mock, Maven, Git, Postman, Atlassian products

Moscow

Responsibilities:- Analysis and countering pirated content- Fighting against phishing, fraud on the Internet- Brand protection (Customers: UFC, HBO, Netflix, also Russian companies)

Moscow

Responsibilities:- Support and development of system services

Advanced Training, Web Development And Design

Specialist, Information Security

Advanced Training, Mobile Application Security Analysis

- Investigation of vulnerabilities in Mobile apps - White/black box security testing - Security audits of the source code (Java, Kotlin.