Vasyl Duda

Built security from scratch for an AI-native credit-rating platform, owning security architecture and controls across the application, cloud and platform. Established secure development practices, integrated SAST, DAST and IAST into CI/CD, and implemented single sign-on (SSO).

Co-founded an LLM-powered browser-automation product and owned its technical architecture, cloud infrastructure and security from initial build through operation. Built and operated the cloud environment using Terraform and Kubernetes, with Vault for secrets management.

Led threat modeling and architecture reviews for financial APIs and payment data flows across AWS and GCP. Designed policy-as-code controls for IAM, encryption and network segmentation to support consistent cloud security.

Built Splunk detections for suspicious user behavior and bot activity; wrote Python automation to block abusive accounts or trigger password resets. Designed security architecture for AI-based fraud detection and API integrations.

Reviewed security architecture for multi-tenant microservices, including service boundaries and tenant isolation. Implemented Kubernetes and container-hardening baselines for application infrastructure.

Architected secure pipelines for training and deploying machine-learning models using customer data. Defined controls for customer-data access and model execution across training and deployment environments.

Performed architecture reviews, authentication, secrets management and API security; automated security testing in CI/CD.

Conducted hybrid-cloud security reviews across AWS and Azure, secure development practices, risk assessments and penetration testing.

Secured industrial communication systems, encryption and hardware access controls.

Master's degree in Computer and Information Systems Security from the National Aviation University, completed in 2015.