DevSecOps Engineer

Описание

Arthur Sakolchik
Belarus, Minsk
B arthur.sakolchik@gmail.com • BenJoice
• arthursakolchik
Experience Information Security Specialist Application Security
Positive Technologies , Moskow March 2023 - presentApplication Security acting as topic lead for DevSecOps tooling operations and rollout. Threat modelling, SAST/SCA in
application development, API Security solutions. Internal trainer S-SDLC process and tooling. Development of information
security policies and procedures.
Information Security Specialist Application Security
Raiffeisen Bank International, Minsk November 2021 - March 2023
Application Security acting as topic lead for DevSecOps tooling operations and rollout. Threat modelling, SAST/SCA in
application development, API Security solutions. Internal trainer S-SDLC process and tooling. Development of information
security policies and procedures.
Security Architect Blockchain Security
StartUp, Minsk September 2021 - September 2022
Development of rules and security requirements that describe the basic and target architecture of the project and
determine compliance with GDPR and ISO standards. Identity and access management, incident response, secure
development.
Additional experience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Security Development Intern Yandex information security school
Yandex, Moscow February 2023 - April 2023 Handling security incidents, solving security problems, training in secure software development.
SDL — Secure Software Development Lifecycle
Fuzzing
Cloud Platform Security
Kubernetes Security
IAM
Server side/Client side
Research Engineer Data analysis & optimization methods
North-Caucasus Federal University (NCFU), Stavropol’ June 2021 - August 2022
Modeling the processes of movement,algorithms and interaction of drones. Experiments of clustering tasks. I focused on
developing a model that will demonstrate the behavior of drones, clustering tasks in a given field & improved programming
skills in the scripting programming languages lua and C++, algorithms skills.
Security Software Engineer Deploying and improving security tools
OWASP ,GoogleSummer of Code 2021 June 2021 - August 2021
Regression testing of security, developer-oriented, web-based applications and APIs.
Volunteering Teaching
Belarusian State University (BSU), Minsk May 2019 - May 2021 Teaching children olympiad mathematics at extra-Math school(UNI-center).
Compilation and verification of mathematical olympiads “Tournament of cities”.
Information security courses Security presentator
Softline, Minsk Secure Software Development Lifecycle. Basic
Secure Software Development Lifecycle. Advance
My courses cover the following topics::
A modern step-by-step approach to building and implementing a secure development process (SSDLC). Subtleties
and principles of building a secure development process in software development organizations Safe development
methodologies. Tools for implementing and automating the secure development process.
Publications & Conferences OFFZONE Why is it important to write private SAST rules, and how to do it correctly
offzone.moscow 2024
Positive Hack Days Workshop. Creating your own Semgrep Rules: advantages and practical tips
phdays.com 2024
1/2

Best Engineering Event in Republic Threat Modeling on practice
itg.by 2023
Distribution of tasks in a clustered field of goals... Journal article
Robotics and Technical Cybernetics 2023
Method and algorithm for task allocation in a heterogeneous group... Journal article
Robotics and Technical Cybernetics 2023
Evaluation of the iterative method of task distribution in a swarm... Journal article
Robotics and Technical Cybernetics 2023
Iterative Method of Labor Division for Multi-Robotic Systems Conference paper
Proceedings of International Conference on Artificial Life and Robotics 2022
Education Formal education
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Belarusian State University Department of Radiophysics and Computer Technology
BSU, Minsk Master’s candidate in Cyber Security Cybersecurity Management. 2023 - present
Belarusian State University Department of Applied Mathematics and Informatics
BSU, Minsk Bachelor’s degree in Cyber Security Cryptography in Java. Keys storage in Android.
Physics and Mathematics School Extra math (GPA 97/100; gratitude with honors)
Belarus, Minsk 2014 – 2019
Awarded a Diploma for Contribution for Demonstrated Ability in Programming
Additional education . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
General education program "Cybersecurity Incident Management"
North-Caucasian Federal University (NCFU) July 2021 - August 2021
General educational program "Social Design"
North-Caucasian Federal University (NCFU) July 2021 - August 2021
Computer Security Courses: "Penetration Testing with Bulba Hackers CTF Team"
Belarusian State University of Informatics and Radioelectronics (BSUIR) November 2020 - December 2020
Olympiad Mathematics Courses"UNI-BSU"
Belarusian State University (BSU) September 2017 - December 2019
Summer Schools & Hackhathons Belarusian State University(IBA+SAP) Team Captain "Blockchain Medicine"
BSU 100th Anniversary Hackathon, Minsk December 2021
North Caucasian Federal University,
Summer University 2021 program, Stavropol’ July 2021
Belarusian State University
Summer Mathematical School "Brigantine", Minsk August 2019
Languages Russian: Native, English: Advanced
2/2