Alex Volnov-CTO, Co-Founder, Cryptography(incl. Post-Quantum Cryptography) and AI Security Expertise

• Integration of Post-Quantum Cryptography (PQC) algorithms into high level protocols.
• Security of implementations of Post-Quantum Cryptography algorithms.
• Transition to Post-Quantum public key infrastructures.
• Security evaluations of Post-Quantum Cryptography (PQC) primitives.
• Drone Cybersecurity
• Satellite Cybersecurity
• AI Security

Security Profiles, GenAI Threat Modeling, GenAI Developers Guide. Quality Assurance, ChatGPT, LLM. Consult on Information Security, support in clarifying corporate standards and guidelines, derive security requirements. Tech Stack - AWS, Azure, Terraform, IAM, PSM, CPM, PVWA, GitHub, SAST, WAF & Firewall, Threat Modelling, DevSecOps, Kubernetes, Cloud Security, Kafka, MongoDB, Jira, Atlassian, Forescout and Nozomi. Open AI Services, Strategic AI Solutions, Data & AI Vision. Strong Authentication 2.0 experience. Strong experience in Cloud-Native Application Protection Platform (CNAPP) and Network Intrusion Detection System. Microsoft Sentinel and Microsoft Defender. Microsoft Defender (XDR): Protection & Detection Focus: Prevention and automated response to threats targeting Microsoft 365 services, endpoints, identities, and applications. Components: Defender for Endpoint, Identity, Office 365, Cloud Apps. Strength: Automated incident investigation and resolution. Microsoft Sentinel: SIEM & Analytics Focus: Centralized collection of log data, proactive threat hunting, and comprehensive security analysis. Features: Monitoring of the entire infrastructure (including non-Microsoft systems), automation (SOAR). Strength: Correlation of events from different data sources. Dynamic and Static Application Security Testing- DAST and SAST. Experience working with deep learning frameworks (e.g., PyTorch, TensorFlow). Experience with large language models (LLMs), transformers, or diffusion models. Familiarity with MLOps tools (e.g., MLflow, Weights & Biases, Docker, Kubernetes). ISMS in the automotive industry, GRC in the automotive industry Strong background in vehicle diagnostics, testing, or system validation Experience with CAN, LIN, FlexRay, Ethernet, and protocols like SOME/IP, TCP/UDP Ability to read and understand Java code (no coding required, just trace/debug) Familiarity with cloud/API topics – tokens, authentication, connectivity Comfortable using Linux/Android tools (ADB, Putty, logs) Experienced with tools like CANoe, Wireshark, ODIS, Idex Analyzing the IT landscape to identify vulnerabilities and potential for further development of the IT security architecture Development and implementation of protective measures against complex attacks and state-sponsored threats Design of a holistic IT security strategy in line with corporate goals and regulatory requirements. Excellent Data Centres and Data Migration experience with the using of Risk Management Methods

• Reviewing the entire lifecycle of user accounts
• Initiate improvements and necessary changes
• Collaborate with various stakeholders to improve IAM processes or solve problems or solve problems
• Regularly review reports for invalid or unauthorized user accounts and unauthorized privileges
• Support quality management and compliance teams during internal and external audits. and external audits
• Organize training for stakeholders to understand the IAM process and the tools
• Setting up a troubleshooting desk for all questions and problems and following them up, e.g. via a e.g. via a ticket system until the solution is found Jira, Atlassian IAM technologies and protocols such as OAuth2, OpenID Connect, SCIM, SAML, RBAC, ABAC, PSM, CPM, PVWA, PBAC, Privilege Cloud, CyberArc, Single Sign-On, and Multi-Factor Authentication. Using the One Identity Manager with the aim to centrally manage digital identities, their accounts, and access permissions (Safeguard Privilege Sessions, Identity Manager, Active Roles, IMPI and SNMP Protocols, Trouble Shooting Configurations SPS )

Authentication: brute-force protection ■ Authentication: bypass ■ Authorization: bypassing authorization schema ■ Session management: log-out functionality ■ Password policies for users ■ Access control on API calls ■ Verify access token on every API request: only those coming from external endpoints, JSON and XML, Forescout and Nozomi, Strong Authentication 2.0 experience. Strong experience in IAM technologies and protocols such as OAuth2, OpenID Connect, SCIM, SAML, RBAC, ABAC, PBAC, PSM, CPM, PVWA, Privilege Cloud, CyberArk, Single Sign-On, and Multi-Factor Authentication. Strong experience in AWS Security, AWS Architecture, Compliance and BSI basic protection. SOC/SIEM on AWS, BSI C5 and AWS, BSI Security Standards. Use of One Identity Manager with the aim to centrally manage digital identities, their accounts, and access permissions (Safeguard Privilege Sessions, Identity Manager, Active Roles, IMPI and SNMP protocols, troubleshooting SPS configurations. Angular frontend development. In-depth experience in the architecture and implementation of Identity & Access Management systems with NetIQ (Identity Manager, eDirectory, SSPR, Advanced Authentication). Sound knowledge in designing client-specific IAM processes. Familiarity with regulatory requirements (in particular DORA, MaRisk, BAIT). Experience with connector development and integration into complex system landscapes. Knowledge of AD, SAP, LDAP, OUD, XML/XSLT and scripting languages. Structured way of working, solution-oriented thinking and strong communication skills. ISMS in the telecommunications industry, GRC in the telecommunications industry. Analyzing the IT landscape to identify vulnerabilities and potential for further development of the IT security architecture. Development and implementation of protective measures against complex attacks and state-sponsored threats. Design of a holistic IT security strategy in line with corporate goals and regulatory requirements. Excellent data center and data migration experience using risk management methods

Development and implementation of programs in C++ and Python in a Linux environment using virtual machine, Docker, containers, bridges, Kubernetes, DevOps, etc. Use of cloud computing services from AWS and Azure.

Cryptographic applications on the Mainframe and Client/Server Environment. Cybersecurity and Penetration Tests. Using the Simple Certificate Enrollment Protocol in the Internet Engineering Task Force. Use and further development of the system that creates, distributes and checks digitala certificates (PKI). Implementation and further development of ACSP - Advanced Cryptographic Service Provider at the both side mainframe and client server. Machine identity protection Identifying types by orchestrating cryptographic keys and digital certificates for SSL/TLS, code signing, mobile and SSH. Design and architecture of automated key and certificate lifecycle management using CI/CD platforms (Jenkins/GitHub Actions) and integration of the tools in CI/CD. Definition of the policies and practices for the certificate lifecycle management Testing of the ACSP and testing of the most important functions (crypto algorithms, cybersecurity, penetration tests). Creation of the complete documentation - Users Guide, Project Architecture Guide, PoW, operating manual, Test cases book, log and error file etc. Using of the CyberArk Technology for Identity Security Solutions and Privileged Access Management. Identity Access Management, SailPoint. IBM Security Qradar SIEM

Leading of the Data Science Project in chemical industry and pharma.

Analyzed and developed programs and design financial applications for insurance industry using: a) C++, JAVA, JavaBeans, J2EE, VBA, DB2 Applications, COM-Technologies, SAP Modules, PKI, DevOps, Security Concepts, Visual Age, Eclipse, UNIX. Mainframe/Client/Server, CICS; c) COBOL<->JAVA Interaction, UNIX Server, CICS JAVA interface , JAVA, J2EE, WAS Developer. b) C, COBOL, ADABAS, NATURAL, ISPW, DB2 Applications, JCL, TSO, CA-Endevor, CA Gen, CCC/Harvest – Mainframe environment, OS/390, PL1, ISPF, REXX, CICS, RACF, TCP/IP, VTAM, WLP/WOLA, system administration, IBM Z, DB2 zOS, VSAM/QSAM, MQ and batch scheduling systems

Analyzed and developed programs for postal code conversion. Customer: Deutsche Post, Cologne, Germany. Analyzed and developed programs for the transition from COBOL platform to SAP using MVS, COBOL, ADABAS, NATURAL, PL1, SAP, VSAM/QSAM, RACF, OS390, SAP, IMS, ISPF, REXX, CICS. Project management and project leadership for 2 large projects: migration from COBOL to SAP platform and SAS (statistical analysis software). Very close work as project manager and project leader with the customer, Bayer AG. Strong experience in the chemical and pharma industry. Customer: Bayer AG. Leverkusen, Germany. Analyzed and developed programs for postal code exchange using MVS, COBOL, SQL, DB2 Applications, Oracle, OS390. Client: Deutsche Post. Cologne, Germany. Analyzed, planned, and developed programs for rating and billing in BSCS using UNIX, C, SQL, Oracle. Project management in a team of 20 people and very close work with 2 offshore companies from Ukraine. Very close and very successful work with customers worldwide: North America, Middle East, Eastern Europe, Africa, Asia. Customer: LHS. Dreieich, Germany. Analyzed and developed test programs for Y2K and statistical analysis using COBOL, ADABAS, NATURAL, PL1, JCL, TSO, SQL, RACF, VSAM/QSAM, DB2 Applications, SAS, IMS, OS390, SAP Finance. Customer: Bayer. Leverkusen, Germany. Analyzed, planned, and developed programs for CICS Java Gateway using MVS, CICS, JCL, COBOL, PL1, ADABAS, NATURAL, SQL, VSAM/QSAM, DB2, IMS, OS390, Java. Customer: Karstadt. Essen, Germany. Developed test programs for Y2K using COBOL, PL1, JCL, Assembler, VSAM/QSAM, MVS, OS390. Development and implementation of special cases stock price model. Monte Carlo simulation for various cases and situations. Automotive industry. Project management and project leadership in a large project for Ford AG in Cologne. Customer: Ford. Department name: Finance & Accounting Systems. Cologne, Germany.

Developed statistical models and programs for the insurance business. Project name: pension insurance. The implementation was done on: C, C++

Developed programs for Construction Research. Accounting systems and graphical interface. Accounting systems for bridges, foundations. Mathematical and imitation modeling, multiprocessing systems. The implementation was being done on: C, C++, SPSS, PL/1, PASCAL, Assembler, FORTRAN, ADABAS, NATURAL, SAS, CLIPPER. Operating Systems: Windows 3.x, UNIX, DOS, MVS