Senior penetration tester specialized in web, mobile & cloud security. 5+ years, 50+ companies, banking-grade experience. OSCP · OSWE · PhD Cybersecurity
Full-spectrum offensive security testing for organizations that take security seriously. Manual, deep, and tailored to your stack.
Deep manual testing based on OWASP Top 10. Business logic flaws, authentication bypasses, API vulnerabilities, and injection attacks.
OWASP · BURP · MANUALSecurity assessments for iOS and Android applications. Static and dynamic analysis, binary reversing, traffic interception.
iOS · ANDROID · MobSFAWS environment scanning, IAM misconfiguration analysis, S3 bucket exposure, and cloud-native attack path discovery.
AWS · MISCONFIGS · IAMManual source code review for PHP, Java, Python, and JavaScript. Integrated SAST/SCA tooling within your SDLC pipeline.
SAST · SCA · SSDLCStructured threat modeling and security architecture design for modern applications and banking-grade infrastructure.
STRIDE · GDPR · PCI DSSLaunch, manage, and triage private bug bounty programs. Vulnerability remediation strategy and researcher communication.
HackerOne · TRIAGE · VDPUniFi & UISP deployment, physical security, ISP backhaul — 2+ years of hands-on Ubiquiti experience.
Senior Application Security Engineer and Penetration Tester based in Kyiv, Ukraine. Currently securing Mono — one of Ukraine's largest mobile banks with 16 million users.
Over 5 years of hands-on experience conducting penetration tests for 50+ companies across fintech, e-commerce, banking, and enterprise sectors. PhD candidate in Cybersecurity at Taras Shevchenko National University of Kyiv.
Active bug bounty researcher on HackerOne. Certified by Offensive Security with OSCP and OSWE — two of the most respected hands-on security certifications in the industry.
Whether you need a penetration test, code review,
or a full security assessment — let's talk.