Алексей Лукьянов
@0006049
I secure cloud, Big Data, and Agile delivery through AppSec, DevSecOps, and compliance-by-design.
ThailandWhat I'm looking for
I've secured 16 digital projects at Sber, including a flagship system with 25+ subsystems, by embedding security requirements before development and reducing open-source risk. My SCA process eliminated critical vulnerable OSS libraries and reduced non-critical vulnerabilities by 70–80%.
Across Sber and Gazpromneft-CR, I've translated PCI DSS, 152-FZ, and GOST requirements into practical technical specifications, Security Profiles, testing scenarios, and Agile delivery practices. I work directly with architects, developers, product owners, penetration testers, and auditors to make Security by Design support delivery rather than block it.
I've also secured Hadoop and Cassandra architectures, built secure CI/CD pipelines with GitLab CI and Kubernetes, and applied SAST, DAST, container scanning, and infrastructure hardening. My earlier infrastructure, IAM, and network-support work gives me practical context for access control, vulnerability remediation, incident analysis, and production operations.
Experience
Work history, roles, and key accomplishments
Lead Engineer / Cybersecurity Expert
PJSC Sber
Aug 2023 - Sep 2026 (3 years 1 month)
Established SCA processes to eliminate critical vulnerable OSS libraries and provided InfoSec support for 16 digital projects. Integrated security requirements at the technical specification stage and adapted PCI DSS, GOST, and 152-FZ for Agile processes.
Lead Specialist, InfoSec Solutions Development
Gazpromneft-CR
Oct 2022 - Jul 2023 (9 months)
Integrated InfoSec requirements across the SDLC in an Agile environment and created Security Profiles for new projects. Ensured architectural compliance with 152-FZ, PCI DSS, and internal standards, and provided AppSec training.
IAM Specialist (1C Systems)
Gazpromneft-CR
Dec 2021 - Oct 2022 (10 months)
Managed InfoSec for business-critical 1C systems across the employee access lifecycle, enforcing least privilege and auditing role requests to prevent toxic combinations.
Lead IT Infrastructure Specialist
Gazpromneft-ITO
Apr 2020 - Dec 2021 (1 year 8 months)
Managed employee onboarding/offboarding, Active Directory administration, and endpoint protection. Maintained 95%+ SLA compliance for L1/L2 support and conducted root cause analysis for recurring incidents.
L2 Technical Support Engineer
Rostelecom
Nov 2017 - Oct 2018 (11 months)
Provided L2-L3 diagnostics for internet, VoIP, and IP-TV services, configured customer premises equipment, and performed deep diagnostics using packet analysis and monitoring tools.
Client Manager
T-Bank (Tinkoff)
May 2014 - Sep 2014 (4 months)
Consulted clients on financial and technical services, resolving issues and logging incidents in the ticketing system.
Education
Degrees, certifications, and relevant coursework
Yandex Practicum
DevSecOps: Secure Development, DevSecOps
Completed a practical project building an end-to-end Secure CI/CD pipeline in GitLab CI deploying to Kubernetes, integrating security tools such as SAST, DAST, and container scanning.
ITMO University
Master's Degree, Information Security and Computer Technologies
Earned a Master's Degree in Information Security and Computer Technologies from ITMO University in 2018.
Plekhanov Russian University of Economics
Bachelor's Degree, Information Security
Earned a Bachelor's Degree in Information Security from Plekhanov Russian University of Economics in 2016.
Availability
Location
ThailandAuthorized to work in
Russian FederationJob categories
Skills
Interested in hiring Алексей?
You can contact Алексей and 90k+ other talented remote workers on Himalayas.
Message АлексейGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
