DevSecOps & Application Security Engineer with 6 years of experience in software engineering and 3+ years focused on secure SDLC, CI/CD security, vulnerability management, and security automation. I started my career in frontend and full-stack development, then moved into backend, AppSec, and DevSecOps. This background helps me work closely with developers, understand application architecture, review code, and build security processes that fit real engineering workflows. My main focus areas include: — Secure SDLC and release security gates — SAST, DAST, SCA, SBOM, and secrets scanning — GitLab CI/CD security automation — Vulnerability triage and remediation workflows — DefectDojo, Dependency-Track, SonarQube, Burp Suite Enterprise, Trivy, Gitleaks — Kubernetes and container security — Developer enablement, documentation, and security reporting In my current work, I own the AppSec/DevSecOps track within the security team, helping build secure development processes across large-scale banking systems. I have worked with 300+ services and applications, triaged 1,500+ validated security findings, and supported remediation of 20+ confirmed critical production vulnerabilities. I’m especially interested in practical security engineering: making security automated, visible, developer-friendly, and useful for real production environments. Open to DevSecOps, AppSec, Security Automation, Platform Security, and Cloud Security roles. Open to remote work, relocation, and visa sponsorship.
«Актив»Компания
БастионНа страже цифровых активов
BI.ZONEКомпания
СитимобилТворим городскую мобильность
Click.ruРекламная экосистема
КРОККомпания
Дата-центр «Миран»Решения для аренды и размещения ИТ-инфраструктуры
DSECКибербезопасность как искусство
EPAMКомпания для карьерного и профессионального роста
F6Компания
ФлантСпециалисты по DevOps и Kubernetes
ГазпромбанкОчень большой банк
GlobalSignКомпания
ХабрЭкосистема для развития людей, вовлеченных в IT
HuaweiHuawei – мировой лидер в области ИКТ
АйПиМатикаКомпания
ISPsystemСофт для управления IT-инфраструктурой
ITSummaЭксперты в производительности
Инфосистемы Джетроссийская ИТ-компания
К2ТехИТ-компания с комплексной экспертизой
