Vadym Derevianko Email & Phone Number

Canada

MISSION:Building secure by-design productsRESPONSIBILITIES:1. Developing strategy for and implementing SDL.2. Working close with development teams to address modern security challenges.3. Secure Design Review, Secure Architecture, Threat Modeling.4. Security Risk Assessment of broad range of Kinaxis products, including local desktop applications, web applications, containerized.5. Implementing and overseeing Security Automation: SAST, DAST, SCA, HTTP Fuzzing, environment deployment, execution of security tools in CI/CD.6. Red Teaming/Purple Teaming on Application Layer.7. Assessing the risk related to third party components usage.8. Overseeing security posture of docker containers.9. Conducting Security Trainings, hosting internal educational events.10. Security Code Reviews.11. Conducting Interviews, helping to staff security team with new members.12. Facilitating external penetration testing and other measures to maintain security compliancesACHIEVEMENTS:1. Deep involvement into development of RapidResponse in public cloud, assessing the risks and choosing proper solutions, reviewing WAF rules.2. Enhancing DAST capabilities by developing an HTTP Fuzzing framework for continuous testing in CI/CD of the core Kinaxis product - RapidResponse.3. Extended coverage of new and legacy code repositories with automated, focused on discovering security vulnerabilities static code analysis.

Ottawa, Ontario, Canada

Ottawa, Canada Area

- vulnerability risk assessment- integration of Software Composition Analysis into build pipeline- developing strategy for SDL in CI/CD world- security training, advocating "shift left" approach- reviewing secure coding practices and standards documents

Kuala Lumpur, Malaysia

Responsibilities:- Managing Product Security team- Developing roadmap for maturity of product security- Establishing secure development practices throughout the company- Security testing of software products with Veracode SAST/DAST/SCA- Coaching and mentoring new team members- Participating in Security Incidence Response Process- Contribution to company security certifications

Kuala Lumpur, Malaysia

Business: Managing and ensuring software security quality by projects Conducting project initiation and leading project status meetings Presenting software security status to top management using business intelligence tools Establishing processes for security testing of Sitecore products Consulting project teams on security practices Coaching new team membersTechnical: Leading and engineering automated security regression testing solution Security vulnerability assessment of Sitecore products/modules Security DevOps Integrating SAST analysis into Sitecore continuous integration infrastructureOne of the most big achievements over this time was establishing process for continuous Static Application Security Testing and wide involvement of development teams in more secure code development

Kuala Lumpur, Malaysia

Dnipropetrovsk Region, Ukraine

Dnipropetrovsk Region, Ukraine

Over the period of 4.5 years my main responsibilities were:1. Security vulnerability assessment of Sitecore products/modules2. Testing of non-functional features of Sitecore products: performance, security, scalability3. Establishing processes for security testing of Sitecore products4. Developing test plans, strategies, guidelines for security testing5. Creating automated test solutions using programming languages and build scripts6. Writing documentation7. Consulting project teams on security practicesOne of the most significant achievement over this time was initiating automated security regression testing for the main Sitecore product: Sitecore Experience Platform. Solution is constantly maintained with the test cases and auto tests covering fixed vulnerabilities.

Dnepropetrovsk

Dnepropetrovsk

Dnepropetrovsk

Specialist, Computer Systems And Networks

Computer Science