Sergei Bakhaev Email & Phone Number

Saint Petersburg, Ru

St Petersburg, St Petersburg City, Russia

Head of Security Operations Team in a SaaS and digital media company.Key achievements:– Conducted a cybersecurity maturity audit based on CIS Controls 8, created an implementation plan to meet the desired level of compliance– Prepared and successfully defended a security unit budget for 2022 and 2023– Conducted a security evaluation during the selection procedures for several corporate systems to select the optimal vendor/product– Implemented several security tools like… Show more Head of Security Operations Team in a SaaS and digital media company.Key achievements:– Conducted a cybersecurity maturity audit based on CIS Controls 8, created an implementation plan to meet the desired level of compliance– Prepared and successfully defended a security unit budget for 2022 and 2023– Conducted a security evaluation during the selection procedures for several corporate systems to select the optimal vendor/product– Implemented several security tools like mail, network (NTA), application (WAF) protection and SIEM solution– Built from ground up small in-house SOC and drove hiring process for security team– Successfully organized several pentests and DDoS attack emulations, the shortcomings identified during the checks were resolved– Organized brand protection and Threat Intelligence analysis, thanks to which it was possible to identify and remediate several vulnerabilities and compromised passwords Show less

St Petersburg City, Russia

Blue team engineer in banking and fintech companyMain achievements:– Deployed Infrastructure as a Code method of security tools management (based on Ansible)– Deployed SIEM based on Elastic Stack, used Sigma community rules– Conducted R&D and deployment of file integrity and EDR/EPP solutions– Deployed security GRC system and managed process of asset management– Deployed corporate-wide PKI system– Created vulnerability management program– Started motion… Show more Blue team engineer in banking and fintech companyMain achievements:– Deployed Infrastructure as a Code method of security tools management (based on Ansible)– Deployed SIEM based on Elastic Stack, used Sigma community rules– Conducted R&D and deployment of file integrity and EDR/EPP solutions– Deployed security GRC system and managed process of asset management– Deployed corporate-wide PKI system– Created vulnerability management program– Started motion towards Zero Trust concept, defined personnel access roles.– Passed several PCI DSS audits, audits of Central Bank of Russia, and multiple pentests Show less

Saint Petersburg, Russian Federation

Teamlead in security product development team.Main achievements:– Migrated an architecture of incident management module of product to a new technical platform– Created and supported Dev environment (DevOps-like role)– Created CI/CD pipelines– Created project and technical documentation on the product according to corporate and national GOST standards

Saint Petersburg, Russian Federation

Engineer in security product development teamMain achievements:– Developed in-house incident management and vulnerability management solutions for RSA Archer according to STO Gazprom and ISO standards– Deployed developed solutions in several financial and oil & gas industry companies– Created project and technical documentation according to national GOST standards– Conducted several security reviews according to OWASP ASVS v3