David Hartman

I’m a cybersecurity professional with 4+ years of experience in vulnerability analysis and security research. I specialize in analyzing software vulnerabilities, creating Docker-based testing environments, and developing Python tools for security automation. My daily work includes CVE/CWE analysis, vulnerability triage, and building proof-of-concept exploits.

As a Vulnerability Analyst at Kaspersky, I analyze software vulnerability flows and create comprehensive testing environments to validate security threats and attack scenarios. I’ve created 100+ Docker-based testing environments for CVE validation and streamlined vulnerability applicability assessment across multiple software versions. I also document findings and provide remediation recommendations.

Previously, as an Information Security Analyst at Astra Linux, I analyzed the effectiveness of information security tools for the Astra Linux OS. I worked on analysis of commonly known CVEs and identified vulnerabilities, automated vulnerability discovery and prioritization processes in CI/CD, and maintained the Bug Bounty program by analyzing researcher reports.

Earlier, as an Information Security Engineer at ICL Group, I deployed and administered comprehensive information security systems and solutions for enterprise clients. I handled deployment/configuration, ongoing administration and maintenance, troubleshooting, and documentation of system configurations and operating procedures. I’m also expanding my skills through hands-on practice on HackTheBox and pwn.college, focusing on web application vulnerabilities and binary exploitation fundamentals.