Position: Application Security Lead
Category: Security
English level: upper
Years of experience: 6

ISO27001:LI certified
AWS Security Speciality certified
Mobile Application Penetration Tester (eMAPT) certified
Presenter at OWASP Kyiv 
Set of internal tech talks about security for engineering staff and managers
Design and maintain Secure SDLC and AppSec program from scratch
Experience as SOC/AppSec team lead: team management and development
Design and maintain threat modelling activity
Define, track and verify security requirements for healthcare, banking and fintech projects
DevSecOps: integrating security tools into SDLC (such as SAST/DAST/SCA/IaC/CSPM/etc)
Manual and automated security testing, research, verification, 3rd-party pentest support
Manage WAFs from security perspective
Kubernetes, AWS, GCP infrastructure hardening
Work with SIEM and other log collection solutions (Splunk, AlienVault, ELK)
Provided log analysis & security expertise for anti-fraud and operations teams
Vulnerability management and automation
Security automation, scripting and custom integrations via APIs
Learning sessions, techtalks and meetups for spreading security mindset across different teams