Open to opportunities

Tamerlan Imanov

@tamerlan_imanov

I'm a Security Developer/Researcher with over 6 years of hands-on experience in application and infrastructure security.

Azerbaijan

Message

What I'm looking for

I’m looking for a cybersecurity role where I can own CVE triage and exploit-path analysis, automate detection and remediation through CI/CD, and partner with engineering teams to build secure, privacy-focused software.

As part of my security research, I identify vulnerabilities in open-source ecosystems and contribute security patches to JavaScript (npm), Python (PyPI), and Go modules — addressing issues ranging from dependency injection flaws to insecure deserialization and authentication bypasses. This proactive approach to supply chain security allows me to not only discover threats but directly remediate them at the source.

Experience

Work history, roles, and key accomplishments

Current

Security Researcher

Current

Cloudlinux OS

Apr 2025 - Present (1 year 2 months)

Researched and triaged CVEs across endpoint, network, and cloud attack surfaces, analyzing root causes to assess exploitability and prioritize remediation. Developed custom patches/mitigations for critical issues, reducing exposure windows from weeks to hours, and automated compensating controls and CI/CD security gates.

CVE Analysis & Triage OWASP Top 10 Secure SDLC SAST DAST Incident Response CI CD

Senior Security Engineer

Azercell Telecom

Nov 2022 - Mar 2025 (2 years 4 months)

Led incident investigation and response by analyzing EDR, authentication logs, firewall data, and network traffic to contain and remediate threats. Built a DevSecOps vulnerability tracker integrated into CI/CD (cut response times by 70%) and developed a Python-Flask SOC automation platform that saved 50% of analyst time per incident.

Incident Response EDR SIEM SOC Operations Threat Hunting DevSecOps Python Web Application Security

Security Engineer

Pasha Construction LLC

Jul 2019 - Oct 2022 (3 years 3 months)

Designed and tuned custom detection rules through false-positive review and functional testing, reducing mean time to respond by 90% and improving signal-to-noise across detection pipelines. Performed threat modeling and hardened applications against SQL injection and XSS to improve scalable detection and response efficiency by 30%.

Detection Engineering SIEM Threat Modeling False Positive Tuning OWASP Top 10 SQL Injection XSS Incident Response

Software Engineer

Smart Spinal Solutions

Jul 2018 - Jul 2019 (1 year)

Developed a modular website using Angular and JavaScript, improving performance by 35% through Webpack and Babel. Implemented a RESTful API and UI designs that increased conversions by 40% and improved user experience by 30%.

Angular JavaScript Webpack Babel RESTful APIs UI Performance Optimization Conversion Optimization