Andrey Shevchuk

Experience

• 

  Kiev National Taras Shevchenko University

  Jan 2005 - Jan 2007

  Engineer

  Project Description: IT-Support (L2)Key Responsibilities: Staff IT support, intranet support, servers support (Linux, FreeBSD). - Firewall - Mail - Web-server Technologies: Linux, FreeBSD, perl, bash

• 

  Київстар

  Jan 2007 - Jan 2008

  Software Developer

  Project Description: Billing systems development Key Responsibilities: - Suscriber's billing data processing - Subscriber's activities development Technologies: Bash, Perl, SOAP, XML / XSL, PL/SQL (Oracle), Java

• 

  MHP SE

  Jan 2008 - Jan 2010

  IT Security Engineer

  Project Description: IT Security department Key Responsibilities: - User activity analysis (Staff monitoring) - Security incidents investigation - Vulnerability management - Forensics - Software development / integration for internal needs Technologies:SIEM systems, Inventory systems, Authentication systems, BackTrack linux

• 

  Київстар

  Jan 2011 - Jan 2012

  Software Developer

  Project Description: Billing systems development Key Responsibilities: - Suscriber's billing data processing - Subscriber's activities development Technologies: Bash, Perl, SOAP, XML / XSL, PL/SQL (Oracle), Java

• 

  Life:)

  Jan 2012 - Jan 2013

  Leading IT Security specialist

  Project Description: IT-Security department Key Responsibilities: - Security incidents management / investigation - Infrastructure availability monitoring / assurance - ITGC IT-audit participation (evidences gathering) - Vulnerability management system and process deployment / development Technologies: SIEM systems, BackTrack linux, Oracle, Python, bash, Nessus, Nexpose

• 

  BMS Consulting

  Jan 2013 - Jan 2014

  Information Security Consultant

  Project Description: Information security consulting service (Information security department). Penetration tests as a service. Key Responsibilities: - Penetration testing - IT-Audit (CIS Compliance) - Static / Dynamic source code analysis - Software development for internal needs Technologies: Kali linux, Metasploit, Burpsuite pro, IBM AppScan source, Nessus, Nexpose, Qualys.

• 

  GlobalLogic

  Jan 2014 - Jan 2016

  Software security assessment, Penetration testing, Static source code analysis - Static code analysis - Dynamic analysis of software- Vulnerability assessment / Penetration testing

  • Senior Application Security Engineer, QE

    Jan 2016 - Jan 2016

  • Application Security Engineer, QE

    Jan 2014 - Jan 2016
• 

  Ciklum

  Jan 2016 - Jan 2019

  - Unit management- Projects estimation- Technical consultancy of sales- Software security assessment Project management, Pre-sales, Unit management activities Project management, Pre-sales, Unit management activities Application Security Assessment ProjectsLeading projects, participating in pre-sales, acting as a security engineer in particular projects Software security assessment

  • Head of Cyber Security Unit

    Jan 2019 - Jan 2019

  • Head of Security QA Unit

    Jan 2018 - Jan 2019

  • Acting Head of Security QA Unit

    Jan 2017 - Jan 2018

  • Security QA Manager

    Jan 2017 - Jan 2017

  • Senior Application Security Engineer

    Jan 2016 - Jan 2017
• 

  Self-Employed

  Jan 2019 - Jan 2020

  Independent Consultant

  Application Security Consulting (voluntary basis)

• 

  Anonymous employer

  Jan 2020 - now

  Lead Software Engineer