Looking for a job

Кирилл Тихомиров

@0008717

Application Security Engineer at a Confidential Financial Institution who automated processing of 1,000+ security requests to about two weeks.

Georgia

Message

At a Confidential Financial Institution, I assess applications across about 10 teams using SAST, DAST, SCA, and manual Web and API testing. I guide remediation and assess residual risk for release decisions.

I built Python automation that cut processing of more than 1,000 ITSM requests from several months to about two weeks. I also triage findings and review dependencies with Checkmarx, Fortify, Burp Suite Professional, and Trivy.

Previously, at a Confidential Banking Group, I reviewed system designs, advised teams on enterprise IAM and OIDC integration patterns, and created a checklist of more than 40 acceptance cases. My earlier work included assessing security for a Confidential Restaurant Franchise Network and building small Vue.js web projects at RTU MIREA Mobile Solutions Engineering Center.

Experience

Work history, roles, and key accomplishments

Current

Application Security Specialist

Current

Confidential Financial Institution

Jan 2025 - Present (1 year 10 months)

Assess applications across ~10 teams with SAST, DAST, SCA and manual Web/API testing. Built Python automation that cut processing of 1,000+ ITSM requests from several months to about two weeks.

SAST DAST SCA Checkmarx Fortify Burp suite Trivy Python Web Security API Security

Information Security Engineer

Confidential Banking Group

Aug 2022 - Dec 2024 (2 years 4 months)

Reviewed new and changed system designs with architects and defined security requirements. Redesigned access roles, helping cut one-off requests from >40% to ~6% and identified Broken Access Control in ITSM.

IAM OIDC RBAC ABAC Security Architecture Access Control Vulnerability Management

Systems Administrator

Confidential Organization

Apr 2020 - Aug 2022 (2 years 4 months)

Managed IT infrastructure, workstations, remote access VPN and user support.

IT Infrastructure VPN User Support

Laboratory Assistant

RTU MIREA Mobile Solutions Engineering Center

Jun 2019 - Aug 2022 (3 years 2 months)

Built small Vue.js web projects and configured KNX-based building automation systems.

Vue.Js KNX Building Automation

Independent Information Security Consultant

Confidential Restaurant Franchise Network

Assessed systems, infrastructure and data flows for a distributed restaurant franchise network. Delivered a security report and executive presentation with prioritized, phased recommendations.

Security Assessments Risk Assessment Security Reporting Executive Presentation