Vladimir S Email & Phone Number

Germany

Germany

Berlin, Germany

- Designed and implemented a set of microservices generating security scanning configuration for all Grammarly projects (1000+) with SCA/SAST/Container scanning tools (failure rate <5%). Ensured full language support and up-to-date results. Established OPEX metrics for security automation pipeline. Collaborated with all engineering teams on making the security automation pipeline as efficient as possible.- Designed an auto-remediation system with the help of Renovate bot to automatically patch vulnerabilities across all Grammarly projects. Established OPEX metrics for auto-remediation.- Designed vulnerability prioritization algorithm (based on CVSS and information about vulnerability) to report only the riskiest bugs to Engineering teams ("focus on the most important").- Contributed to vulnerability reporting mechanism based on internal org structure graph (Workday+Slack+Neo4J+Gitlab integration).- Serving as a member of "Green Team". Collaborating with Infrastructure teams and technical leadership on establishing a "quality bar" for Grammarly projects: establishing "Golden Path", "Golden State". Contributing to tech debt tracking (metrics for EOL software, etc.). Reporting and tracking violation of best practices in the codebase on the org level.- Serving as a decision maker for acquisition of external security and IT tooling.

Kiev Region, Ukraine

- I was a technical leader for a team of 4 security engineers.- Designed technical interviews for Security Eng/EM roles. Interviewed candidates.- Selected 3rd-party security scanning software, designed integration of SAST/SCA/Container scanning tools for a subset of Grammarly products.- Designed an on-call process for product security team: bug bounty reports, product security detections and incidents.- Served as a key member of the team responsible for SOC2/ISO27001 audits.

Kiev Region, Ukraine

- Designed a vulnerability disclosure policy for Grammarly bug bounty program.- Performed implementation and design reviews of Grammarly products. Specifically, design and implementation reviews for MFA and SSO features, stateless auth proposal.- Designed the initial (secure) SDLC process for Grammarly engineering org.- Communicated with Engineering org and external researchers on discovered security issues to enforce vulnerability management policy.- Facilitate remediation and response to discovered issues in accordance with external and internal SLAs for vulnerability management and bug bounty program metrics. Helped engineers to fix bugs faster and more reliably.- In collaboration with Infrastructure team, contributed to establishing basic technical security controls across Grammarly's AWS accounts. In particular, technical controls for AWS Inspector, AWS Security Hub, basic checks in AWS config.> I was the Top 1 researcher (still top 1 in 2023) at Grammarly bug bounty program as of Sep 2018. I was excited to join Grammarly as the first-ever security engineer in the org.

Kyiv, Ukraine