Hire the Best LDAP Specialists
in Ukraine

Hi! I'm a Cybersecurity Engineer with hands-on experience in vulnerability assessments, cloud security reviews, and compliance evidence gathering. My main responcibility is to make clients understand and improve their security posture. I work across the full assessment lifecycle: scanning exposed services, reviewing configurations, validating findings, and delivering clear, actionable remediation reports that your clients can actually use. I'm comfortable operating under NDA and have supported multiple audit during my experience in fintech sector, so I understand the discipline and documentation standards that consulting engagements demand. What I can do: - Conduct vulnerability assessments using Burpsuite Scanner, OpenVAS, Nmap, Acunetix from scoping through validated findings - Review exposed services, firewall configurations, and network infrastructure for security gaps - Perform Microsoft 365 security reviews - Azure security posture analysis aligned with CIS benchmarks and Microsoft Secure Score - Gather and structure technical evidence for compliance projects (PCI DSS, ISO 27001) - Produce detailed, structured remediation reports tailored to any environments Relevant experience: - Conducted web penetration tests using OpenVAS, Burp Suite, OWASP ZAP, and Metasploit - Provided technical evidence and documentation support for internal audits and certifications - Performed risk assessments and security hardening for infrastructure and information systems - Wrote security policies, remediation playbooks, and technical process documentation Understanding of frameworks & certificates: PCI DSS ISO 27001 CIS Benchmarks Tech stack: OS : Linux (Red Hat, Ubuntu), Windows (desktop & server), macOS VM : VMware, VBox SIEM : ELK/Wazuh, ArcSight, Splunk Cloud : Azure, Entra ID, Defender Network : Fortinet IPS&Firewall, Check Point Firewall, F5 WAF Anti-DDoS : Radware, Arbor EDR : Elastic Agent, Trellix PAM : CyberArk NDR : Vectra Vulnerability Detection : Nmap, Metasploit, Burp Suite + Scanner, OWASP ZAP, OpenVAS, Harvester, Sublister, Maltego

Summary: Highly skilled and experienced white hat senior offensive security specialist with a comprehensive background in penetration testing, web application security, and network security. Proven track record of conducting complex security audits, identifying and remedying vulnerabilities, and implementing best practices for clients. Skilled in utilizing advanced tools and techniques such as Metasploit, Nmap, and Burp Suite. Proficient in Windows, Linux, and macOS operating systems, as well as web development technologies. Possesses excellent communication and leadership skills, able to lead teams of security specialists and work closely with clients to achieve their security goals. Skills: Advanced proficiency in penetration testing methods and tools, including Metasploit, Nmap, Burp Suite, etc. Extensive experience with Windows, Linux, and macOS operating systems Comprehensive knowledge of web development methods and technologies Strong background in conducting complex security audits of networks and information systems Proven track record of leading security projects and managing teams of security specialists Strong communication and interpersonal skills, able to work closely with clients and stakeholders to achieve security objectives My developer’s background: ° PHP, Python, Delphi (embacadero), JavaScript, assembler ° Wordpress, laravel, django, many other frameworks and content management systems ° HTML+CSS Developing, PSD to WORDRESS ° Database Enginering (MySQL, MSSQL, PostgreSQL, RabbitMQ, Clickhouse) Today services : Senior Penetration and Security tester Certifications: Rapid7 Metasploit Specialist SANS SEC542 SANS SEC560 OSWE BurpAcademy Work before: Ford motor company, Hewelt packerd, Shieldox , Starbucks, Rocket.chat etc.

Installing an SSL certificate can be a daunting task even for experienced system administrators. Having worked in the SSL department of one of the major SSL and hosting provider for the past 9 years, I managed to acquire broad experience in dealing with security and SSL configuration on variety of platforms and servers. So if you need a hand with: - SSL installation, - getting rid of mixed content, - troubleshooting certificate chain issues, - setting up protocol and cypher suite configuration for PCI compliance, - CloudFlare SSL, - business validation for Organization Validation/Extended Validation (OV/EV) certificates, - etc. I will be glad to offer my services!

=> Let's Connect Hello, I'm Dima, a seasoned CyberSecurity Specialist and Turnkey Infrastructure Expert specializing in BigData solutions and data analysis, utilizing a DevOps approach. => Expertise Overview With a robust passion for constructing SOC, SOAR, and SIEM solutions, my primary focus lies in developing data ingestion, enrichment, and analysis pipelines, ensuring they are highly available and fault-tolerant. My expertise extends to building central logging and real-time processing platforms from the ground up, optimizing them for performance, security, and reliability across multiple environments, whether in the cloud or on-premise. => Value Proposition My commitment is to deliver solutions that not only centralize security and threat intelligence but also facilitate enhanced control over data, ultimately contributing to infrastructure cost savings. => Technological Summary CyberSecurity:------- > Wazuh, Suricata, pfSense BigData:--------------- > Kafka, ElasticSearch, OpenSearch Data Processing:----- > FluentD, Vector.dev, Apache NiFi Infra as Code:--------- > Terraform, cdktf, cdk8s Virtualization:--------- > Proxmox, VMware Containerization:----- > Kubernetes Clouds:---------------- > AWS, Hetzner, DigitalOcean, Linode Automation:----------- > Jenkins, GitHub Actions Monitoring:----------- > Zabbix, Grafana, Kibana, Prometheus, Thanos Mail:--------------------> MailCow SMTP/IMAP, Postfix VPN:------------------- > OpenVPN Server Programming:-------- > Bash, Python, TypeScript Operating Systems:- > CentOS, RHEL, Rocky Linux, Ubuntu, Debian => Personal Attributes • Leadership: Leading by example with a team-first approach • End-to-End Execution: Proficient from POC to Enterprise-level implementation • Resilience: Demonstrating high thoroughness and endurance • Adaptability: A quick, can-do architect and experienced troubleshooter • Optimization: Adept in process and performance optimization • Documentation: Skilled technical documentation writer • Vision: A visionary in technological implementation and solution provision

I have 8+ years in Security with a focus on Application Security. Have experience with Secure Development Lifecycle on each layer: providing recommendations to the application, implementing security controls in CI/CD (Jenkins), manual testing of application, regular testings implementation (SAST, DAST and SCA). Additional skills: Migration to the cloud; Implementing SSO and ADFS; AWS – have experience with multiple AWS products including all security products, API Gateway, CloudFront, CloudTrail, CloudHealth, and much more; Vulnerabilities and incident analyzing with OWASP, Burp, Nesus, Acunetix, KaliLinux tools, working with server and PC logs; Strong knowledge of OSI and TCP/IP model; IT Security governance: ISO 27001, ISO 27002, ITIL, GDPR; Hands-on experience with systems: DLP system; Proxy Server; Malware Analyzer; EMM solutions; SIEM McAfee; IT security methodology – write regular including best practices for Web developing, API and GraphQL developing, internal policies etc; Key management, PKI and SSL/TLS; Programing language: Python, SQL, Java, Node is, JavaScript, CSS, HTML. Hands-on experience with developers instruments like Swagger, Jenkins, Kubernetes, Docker, RunDeck, Git, etc; Strong knowledge about virtual infrastructure and containers; API management, API security.

Regulatory Compliance Lead & Quality Architect. Risk-based CSV validation kits and validation-by-design frameworks for inspection-ready, compliant systems. 📋 Focus on regulated environments (GAMP 5, GxP, CFR Part 11, EU Annex 11, ISO 13485): 🔹 Validation-aligned documentation across medical, pharma, biotech, and R&D labs. 🔹 Traceable workflow steps and sign-off design for QMS systems. 🔹 Privacy, data integrity (ALCOA+), DPIA/record-keeping, breach traceability, and audit trails aligned with hybrid cloud systems. 🧩 Validation & Quality Governance: 🔹 Development of Computerized System Validation (CSV) documentation packages for GxP-regulated SaaS and laboratory systems, covering Validation Plans, Test Protocols (IQ/OQ/PQ/DQ), Traceability Matrices, and Validation Summary Reports. 🔹 Creation and maintenance of Validation Master Plans (VMPs) defining validation scope, organizational roles, lifecycle strategy, and change-control governance across systems or sites. 🔹 Implementation of Quality Management Systems (QMS) aligned with ISO 9001, ISO 13485, and 21 CFR Part 11, including document control, CAPA, and audit readiness. 🔹 Application of Quality Risk Management (QRM) methodologies (per ISO 14971, GAMP 5) to evaluate and mitigate data integrity and system risks throughout validation and operation. 🔹 Integration of QRM within the QMS and CSV within the VMP, ensuring traceable, risk-based validation consistent with GxP and data-integrity principles. 🔹 Support for regulatory inspections and supplier audits, ensuring that validation evidence and QMS documentation demonstrate continuous control and compliance. 🧪 Pharma, MedTech & R&D Focus: 🔹 Regulatory compliance assessment and validation documentation aligned with FDA 21 CFR Part 11, EU Annex 11, GAMP 5, and GxP standards (GMP, GDP, GLP, GCP). URS/FS/DS, DQ/IQ/OQ/PQ, traceability, validation, protocols 🔹 Compliance & risk management for EHR, EMR, AI diagnostics, medical IoT, biotech software, and electronic lab systems (LIMS/LIS/ELN) 🔹 Structured documentation for regulated health platforms (FHIR, HL7), lab data integrity (ALCOA+), and audit trails 🔹 Traceable R&D workflows and design validation aligned with QMS and regulatory frameworks 🚀 What you get: 📌 Support SaaS, MedTech, and regulated industries in achieving compliance and regulatory readiness. 📌 Define, document, and optimize workflows for efficiency & compliance. 📌 Aligned tech teams, QA, and product with clear requirements and visualizations. 📌 Reduce technical debt and scope creep through structured documentation and clear boundaries between features, data, UI/UX, and integrations. 📌 Professional documentation you can show to investors, accelerator programs, or tech vendors to build trust. 📌 A long-term roadmapping stack that grows with your business. 📌 Define what MVP vs. later phase is so you avoid unnecessary development costs. 📌 Available for both hourly and fixed-price projects based on scope and complexity. 🌐 Industry Expertise: 🔷 Healthcare, MedTech & R&D IT – Compliance & risk management for EHR, EMR, AI diagnostics, medical IoT, biotech software, electronic lab systems (LIMS/LIS), and regulated digital health platforms (FHIR, HL7, GxP (GAMP, GMP, GDP, GCP, GLP), CFR Part 11, EU Annex 11, ICH Q9). and FDA 510(k) / 21 CFR Part 807 Subpart E. Validation, documentation, and risk management for regulated software and systems. 🔷 Enterprise IT & SaaS – Architecture & compliance for multi-tenant SaaS, ERP modernization, and cloud transformation. 🔷 Industrial Automation & Robotics – IT architecture for secure industrial systems, Operational Technology (OT) Security, and AI-powered robotics. 🔷 IT Governance – Ensuring IT compliance with risk-driven architecture strategies. 🔷 Digital Transformation & Cloud Strategy – Modernizing legacy IT systems, ERP migrations, and governance for large-scale cloud solutions. 🗸 Adherence to BABOK, DMBOK, SDLC, ISTBQ, INVEST/SMART, 12-factor, MACH, AWS, and GCP standards and best practices. 📚 Documentation & Business Analysis Services: - 📝 SRS/SRD/BRD/FRD/NFRD/BPR/TDD/SAD/SDD/RFI/RFQ preparation, - 📝 FHIR resource modeling, HL7 mapping, and interoperability documentation for EHR integrations - 🔄 BPMN process modeling, - 🔗API documentation, - 🔀 Process diagrams, ERDs, DFDs, UMLs, conceptual models, and data dictionaries, - 📌 Strategy analysis, - 🛠️ Requirements analysis and design definition, - 📈 Solution evaluation.