Open to opportunities

Максим Довбня

@0004381

Message

I design cloud, application, and DevSecOps security controls for AWS platforms.

Norway

Message

What I'm looking for

I'm looking for remote B2B or contract roles worldwide where I can design and document cloud, application, and DevSecOps security controls for engineering teams.

I've designed security architecture for AWS distributed platforms at eShield, covering multi-VPC networking, Transit Gateway, WAF, EKS/ECS workloads, private RDS/PostgreSQL, MSK/Kafka, and DynamoDB.

I specify least-privilege IAM/KMS and identity controls, including Duende IdentityServer, PKCE, PAR/JAR, DPoP/mTLS, short-lived JWTs, certificate lifecycle management, and refresh-token rotation. I also author GitLab CI security configurations with Gitleaks, Trivy, Snyk, SAST/DAST, severity gates, and remediation reviews.

On Sofa Engineers' TARAN Autonomous Systems project, I led cybersecurity for an autonomous edge-system prototype across cloud, device, operator, and LoRa/radio trust boundaries. I translated STRIDE threat modeling and MITRE ATT&CK mappings into prioritized engineering requirements and security review gates.

I've also built a C#/.NET 7 network-monitoring prototype using SharpPcap, signature-based botnet detection, automated Windows Firewall response, and AES-256-GCM-protected SQLite records. I work effectively in remote, asynchronous teams and focus on clear, actionable security documentation.

Experience

Work history, roles, and key accomplishments

Cloud & Cybersecurity Engineer

eShield

Sep 2025 - Jul 2026 (10 months)

Designed and documented security architecture for an AWS distributed platform, including multi-VPC networking, IAM/KMS, and identity controls. Authored GitLab CI security configurations and reviewed findings with an 8-person team.

AWS IAM VPC WAF DynamoDB mTLS JWT Gitlab CI Gitleaks Trivy Snyk

Cybersecurity Engineer

Sofa Engineers

Mar 2025 - Jun 2026 (1 year 3 months)

Led cybersecurity workstream for an autonomous edge-system prototype, producing STRIDE threat models and MITRE ATT&CK mappings. Specified device identity, PKI, RBAC/MFA, and encrypted communications.

STRIDE Model PKI mTLS JWT RBAC MFA Zero Trust Threat Modeling

Cybersecurity Researcher

Simon Kuznets Kharkiv National University of Economics

Jun 2024 - Apr 2026 (1 year 10 months)

Developed a C#/.NET network-monitoring prototype with packet capture and botnet detection. Implemented automated firewall response and AES-256-GCM protection for event records.

C#.NET Wireshark SQLite

Junior Security Analyst / Cybersecurity Intern

TOV Skhid-Terminal

Feb 2024 - Feb 2025 (1 year)

Analyzed network traffic and logs, triaged suspicious activity, and ran vulnerability scans. Tested Snort and botnet-detection rules against simulated malicious traffic.

Wireshark Splunk Vulnerability Scanning Snort