At the Analytical Center, Ministry of Emergency Situations, I deployed centralized logging and monitoring on ELK and Wazuh across four hosts. I wrote custom detection rules mapped to MITRE ATT&CK and built Kibana dashboards with SLI-based alerts.
I also built a real-time log pipeline using Spark Structured Streaming, FastAPI, and Python to detect 5xx spikes, brute-force attempts, and endpoint scanning. To protect credentials and API keys across dev, stage, and prod, I moved configuration out of source code, enforced least privilege, and added gitleaks to pre-commit and CI.
At Informzaschita, I supported ISO 27001 and GOST R 57580.1-2017 audits for financial-sector clients, contributing to gap analysis and control mapping. I drafted risk assessment reports and remediation roadmaps and took part in third-party vendor risk evaluations.
At Positive Technologies, I ran web application penetration tests using Burp Suite and OWASP ZAP, documenting and prioritizing issues with OWASP Top 10 and CVSS. I also teach programming and cybersecurity fundamentals to school and university students and private clients, and I'm preparing for the IAPP CIPT exam.
