- Leading participation in building Continuous Security- Supply Chain security practices implementation - Create and integrate security tools into CI/CD (SAST, SCA, DAST, IAC)- Create and modify security tool rulesets- Automation of product security tasks

- Build and expand SSDLC process using SAST/IAST practices;- Perform regular application security testing and analysis of the results;- Control on fixing vulnerabilities;- Spread DevSecOps ideas and approaches for developers via MeetUps and presentations;

- As an architect, launched project of remote secure dev-workstations via VPN;- Perform network segmentation and environment migration;- Building CI/CD over SDLC (via Jenkins, Jira, Bamboo, etc);- Deploying of program components into test environments;- Acceptance and integration testing;- Risk evaluation and release control;- Analysis of business requirements;- Preparing regulation documents for sign-off;

- Analysis of the problems initiated by users of information system;- Development of technical specifications for improvement of information system;- Participation in the testing of information system;- Analysis of business processes and the development of proposals for their improvement;- Design patterns and standards of internal processes of the department.

- Analysis and formation of product requirements / new functionality (interfaces, usability);- Functional, performance, and system testing (including system services);- Consultation with the departments of the company;- Automation of acceptance testing.

- Analysis of business processes and requirements of the information environment;- Consultation with the business departments of the bank;- Development and implementation of the new strategies for testing the information system;- Develop test cases based on business requirements;- Maintenance and solution of system problems in collaboration with the developer - International Technology Organization;- Development of training processes and support of online users via… Show more - Analysis of business processes and requirements of the information environment;- Consultation with the business departments of the bank;- Development and implementation of the new strategies for testing the information system;- Develop test cases based on business requirements;- Maintenance and solution of system problems in collaboration with the developer - International Technology Organization;- Development of training processes and support of online users via Hotline;- Participation in the process of system upgrading (system performance, usability), improved;- Conduct of system pilot launch in the bank branches;- Information system successfully put into operation. Show less