Looking for a job

andrey zakhozhenko

@andreyzakhozhenko

Python Backend and Application Security Engineer building automation that reduced manual work by approximately 70% and validating security issues in Python projects.

Russian Federation

Message

What I'm looking for

I'm transitioning into Application Security and DevSecOps through hands-on security reviews, secure coding, CI security tooling, and remediation work.

At Nepstroy, I developed and supported Python automation for Bitrix24, Telegram, and internal business processes. The integrations connected CRM, messaging, forms, and business systems, reducing manual work by approximately 70% and supporting 40–45 employees.

I also maintained Docker-based services, diagnosed production failures using logs and reproducible test cases, and implemented a Telegram and MoySklad bonus workflow with JWT creation and validation.

Through my independent AppSec Portfolio Lab practice, I reviewed three public Python projects and documented 14 validated security issues with remediation guidance. I fixed a critical fail-open authentication bypass, added regression tests, and built SitePosture, a Python CLI for passive analysis of HTTP security headers and cookie configuration.

Experience

Work history, roles, and key accomplishments

Current

Independent Security Practice

Current

AppSec Portfolio Lab

Jan 2025 - Present (1 year 8 months)

Reviewed three public Python projects and documented 14 validated security issues with evidence and remediation guidance. Built SitePosture, a Python CLI for passive analysis of HTTP security headers and cookie configuration.

Secure Code Review OWASP ASVS CWE HTTP Security Headers Python CLI CI CD Ruff Bandits CodeQl Dependabot Pytest

Python Developer

Nepstroy

Feb 2022 - Sep 2025 (3 years 7 months)

Developed and supported Python automation for Bitrix24, Telegram, and internal business processes using REST APIs and webhooks. Reduced manual work by approximately 70% and supported 40-45 employees.

Python fastAPI Django REST APIs Webhooks Bitrix24 Telegram Bot API PostgreSQL Redis Docker Linux Git GitHub Actions Nginx Gunicorn JWT SQLAlchemy Alembic Pydantic AsyncIO

Education

Degrees, certifications, and relevant coursework

Saint Petersburg College of Information Technologies

Vocational degree, Information Security

2022 - 2025

Grade: 4.5/5

Activities and societies: Second place in the Saint Petersburg WorldSkills competition; third place in professional skills competitions.

Vocational degree in Information Security, graduated with an average grade of 4.5/5. Achieved second place in the Saint Petersburg WorldSkills competition and third place in professional skills competitions.