Vladislav Zhigalovskiy

• Act as the only cybersecurity specialist on a FinTech / cloud infrastructure project.
• Designed secure IaaS topology across 10 servers: dedicated VPN channels, strict IP whitelisting, SIEM-based logging, and security event
monitoring.
• Configured and optimized WAF policies for a critical FinTech web application handling up to 1, 500 legitimate RPS.
• Built defense-in-depth architecture, network segmentation, and fault-tolerant remote VPN access to hybrid corporate resources.
• Performed regular DAST and infrastructure vulnerability assessments using OpenVAS, Burp Suite, OWASP ZAP, Kali Linux, and related
tools.
• Reduced illegitimate and malicious traffic by 80%, enforced TLS 1.3 for network communications, and discovered 5 application
vulnerabilities including 1 Critical issue.

1. Design and deployment of a comprehensive security infrastructure based on physical and virtual servers (Proxmox VE, Hyper-V), including antivirus protection, SIEM and DLP systems.
2. Implementation and administration of Kaspersky Security Centre: centralised management of security policies, updates and node status monitoring.
3. Technical analysis of suspicious and malicious software, as well as potentially dangerous utilities using static (IDA Pro) and dynamic (Sandboxie, Microsoft Sandbox, Process Monitor, Wireshark) analysis to prevent information security incidents.
4. Forming expert opinions on software security to make decisions about its use in a corporate environment.
5. Configuring and supporting DLP system rules aimed at protecting confidential information and personal data of users, minimising the risk of leaks.
6. Administration of virtualisation infrastructure based on Proxmox VE and Hyper-V.
7. Deploying SIEM Wazuh, connecting key event sources, writing decoders and correlation rules.
8. Implementation and configuration of NGFW OPNsense: deep packet inspection (DPI), antivirus scanning at the gateway, load balancing and traffic routing.
9. Organisation and implementation of information security system migration projects: transfer of functionality, testing, commissioning.
10. Management of server infrastructure security.

Achievements:
1. Analysed more than 40 specialised utilities for malicious or potentially dangerous functionality, which made it possible to use them safely in a production environment or block risky solutions.
2. Deployed and configured a security perimeter based on 2 physical and 6 virtual servers.
3. Implemented a project to introduce three new information security systems, which significantly improved security and closed critical vulnerabilities.
4. Wrote 80+ correlation rules and 20+ decoders for SIEM, which increased the accuracy of incident detection and reduced response times.

Responsibilities:
1. Administered enterprise security solutions, including anti-malware management consoles and secure email/web gateways, ensuring continuous protection.
2. Investigation of information security incidents.
3. Identification of potential threats to critical information infrastructure.
4. Administered Next-Generation Firewalls (NGFW), implementing strict Access Control Lists (ACLs) and traffic filtering policies.
5. Managed cryptographic infrastructure: configured secure digital signature systems.
6. Analysis of SIEM (MaxPatrol) and DLP events.
7. Testing for vulnerabilities in the Centres services.
8. Led compliance initiatives for Critical Information Infrastructure (CII), creating comprehensive documentation sets (Threat Models, Security Plans) aligned with national regulations (equivalent to NIS2 and ADHICS standards).

Achievements:
1. Generated and renewed 200+ digital certificates/digital signatures, facilitating secure electronic document workflows.
2. Compiled 800+ documentation packages for critical information system compliance, streamlining audit and certification processes.
3. Conducted work on analysing information security and identifying vulnerabilities in the Centres network environment and services (Burp Suite, Zanmap, zaproxy, Snyk CLI, Nessus), identifying more than 15 vulnerabilities (5 critical).
4. Developed and maintain a threat intelligence database and access control matrix for the organization’s personal data system.

• Selected server components, firewalls, routers, and switches according to customer requirements and technical specifications.
• Studied vendor equipment lines and communicated with customers on infrastructure and security-hardware selection.

Responsibilities:
1. Repairing and improving computers
2. Setting up networks based on TP-Link and MikroTik routers and switches
3. Development and customization of security policies
4. Installation and configuration of video cameras
5. Server support on Windows Server 2019
6. Preparation and connection of workstations
7. Physical network connection of buildings, installations and cameras
8. Connecting employees to Active Directory

Accomplishments:
1. Connecting the construction object to the network
2. Bringing internet to the construction object using wireless antennas
3. Creating security policies on the objects

Responsibilities:
1. Running autotests on the Pax and Verifone POS terminal test benches
2. Finalization of autotest scripts for new functionality
3. Editing of scripts for Windows command shell
4. Manual testing of POS terminals and bank microprocessor cards
5. Editing and creating SQL databases for parameterization system
6. Detection of errors in software operation
7. Regression testing of POS terminals software

Achievements:
1. Studied EMV, cryptography, payment security
2. Performed testing of multiple shells for different banks
3. Studied working with Verifone, PAX POS terminals.

1. Setting up networks with security recommendations
2. Performing connectivity troubleshooting on a small network
3. Installing a security protection system