cv

Lead Cybersecurity Architect

SiriusOne

• Application Security & Pentesting: manual and automated penetration tests of web and cloud applications using Burp Suite, Nuclei, Metasploit, Invicti, OWASP ZAP; reports aligned with OWASP ASVS.
• Architecture Security Reviews: designed and evaluated secure architectures for payment systems and cloud workloads against CIS Benchmarks, NIST CSF, PCI DSS 4.0, AWS Well-Architected Framework.
• AI/LLM Compliance: built internal methodology for evaluating GenAI applications and RAG pipelines based on ISO/IEC 42001 and NIST AI RMF.
• AI Pentesting: designed and conducted AI/LLM-focused penetration testing using OWASP LLM Top 10 and MITRE ATLAS frameworks.

Founder, Freelancer

Cyber Twierdza

Freelance cybersecurity consulting: penetration testing, compliance advisory (PCI DSS v4.0, ISO 27001:2022, DORA EU), cloud security assessments (Azure, AWS), SOC enablement, phishing simulations, and OSINT.

Lead Cybersecurity Specialist

FTCo Limited

• Led SOC and Security Team: security initiatives, Strategic and Tactical Plans, communication with Executive Management.
• Risk Assessments: conducted risk assessments following ISO 27001:2022, ISO 42001:2023, and CIS RAM standards.
• Vulnerability Management: managed assessment processes and ensured timely remediation.
• Application Security: configured SAST/DAST tools and performed penetration testing.
• AI SOC Enablement: extended SIEM and SOAR use cases (Azure Sentinel, MS Defender, Elastic Stack) for AI-driven threat detection including LLM misuse and data leak patterns.
• PCI DSS Compliance: managed compliance programs including SAQ-D reports, scans, and coordination of external audits.

Lead CyberSecurity Specialist

Finteco

• Established and led SOC department (L1+L2 processes, KPI, SLA, documentation, training).
• Improved cloud security posture for AWS and Azure tenants.
• PCI DSS Internal Audit: compliance assessments, firewall reviews, development configuration standards, SAQ-D, ASV coordination, external QSA audit support.
• Vulnerability Management: established process and policy (PCI DSS, ISO 27001 scope); tooling: Tenable Nessus, Netsparker, SonarQube.
• IAM: Azure IAM, Conditional Access, MFA implementation across group companies.
• Technology stack: Azure Sentinel, ELK, MS Defender, Power Automate, Logic Apps, MITRE ATT&CK, MaGMa UCF, CIS Controls/RAM/CSAT.

Lead System Administrator

Finteco

• Azure IAM, RBAC, PAM, SSO configurations and Conditional Access rules.
• IAM management for group services (Atlassian, developer tools).
• Microsoft 365 support, SharePoint automations (Power Automate), MS Teams.
• Risk management activities and Security Baseline project.
• Vulnerability management: scanning, reporting, ASV scans (PCI DSS scope).

Senior System Administrator

Finteco

System Administrator

CTDev

• Implemented VoIP, upgraded network infrastructure (Avaya switches, Cisco wireless controller, VLANs).
• Migrated EcoPayz project servers (Windows 2003 → 2016), configured SQL failover clusters and Windows NLB.
• Completed Microsoft Silver Partner: Application Development qualification support.

System Administrator

CTXM

• Managed Linux infrastructure (SQUID, BIND, iptables, Postfix/Dovecot, OpenVZ, Bacula).
• Migrated physical servers to VMware vCenter infrastructure.
• Implemented access control, server room monitoring, and video surveillance (Security project).

Cisco Networking Academy

Networking

Engineer's degree

Belarusian State University of Informatics and Radioelectronics

Information Technology