Position: CISO | Security Solution Architect | R&D
Category: Lead
English level: fluent
Years of experience: 8

Let me share 2 stories:

1. When a new Common Criteria Protection Profile for mobile devices was announced, I was selected as a member of a tiger team - focused on certifying new devices in the shortest possible time. Since we only had a draft of the standard at the time, we implemented a flexible solution, which enabled us to quickly adapt to the released document and claim the “world first” achievement.

2. During my tenure as a Vice-Chair of the Security Work Group in Open Connectivity Foundation, I have been tasked to ensure that a certain security feature gets accepted by the work group. However, during the face-to-face session the overwhelming majority of the members voted against it. Since there was only one more chance for vote before the standard version would get finalized, we had to act swiftly. I personally approached representatives from each member company to explain the rationale and address their concerns. During the second vote, that change request was passed unanimously.
I have 8 years of experience in Security Software Engineering, including 3 years as a Security Project Leader (Agile) and 2 years as a Security Researcher (4 patents granted). During this time I've also served as a leader of Security Work Group within the Open Connectivity Foundation, and participated in various other SDOs (Car Connectivity Consortium, FiRa Consortium) as a security domain expert. Preferred coding languages are Python, Rust, Java, C.

My key skills are security architecture & engineering and project leadership. I am interested in transitioning from security management to a security governance position (e.g. CISO). To that end, I have recently received a fully endorsed CISSP certificate.

Please refer below to more details about specific work items and schedule:

August 2013 - present: Engineer/Lead Engineer/Staff Engineer at Samsung Ukraine Research & Development Centre, Kyiv, Ukraine
Project manager (5->30 people) of security certification team (Common Criteria, FIPS 140-2). Multiple major contributions to Samsung Android OS (TLS, certificate validation, WiFi, audit logging). Assurance tool development and specification drafting.

October 2018 - June 2020: Standards Research Engineer at Samsung Electronics Co., Ltd, Seoul, Korea (dispatch)
Participation in SDOs, security review for change requests, specification & patents drafting. Core domain - UWB-based access control.

February 2018 - August 2020: Chair/Vice-Chair of Security Work Group in Open Connectivity Foundation, Beaverton, USA
Planning and coordination, technical steering. Major direct contributions include specifications for role-based access control, device identity hardening, cloud connectivity, and ecosystem bridging. I have also contributed to the OSS reference - IoTviity.
I excel in flexible corporate environments with unrestricted horizontal mobility, and I am a strong proponent for the servant leadership approach.