Alex V.-CTO, Co-Founder, Cryptography (including Post-Quantum Cryptography) and AI Security Expertise

• Integration of Post-Quantum Cryptography (PQC) algorithms into high-level protocols.
• Security of Post-Quantum Cryptography algorithm implementations.
• Transition to Post-Quantum public key infrastructures.
• Security evaluations of Post-Quantum Cryptography (PQC) primitives.
• Drone cybersecurity
• Satellite cybersecurity
• AI security

Security Profiles, GenAI Threat Modeling, GenAI Developers Guide. Quality Assurance, ChatGPT, LLM. Consult on Information Security, support in clarifying corporate standards and guidelines, derive security requirements. Tech Stack - AWS, Azure, Terraform, IAM, PSM, CPM, PVWA, GitHub, SAST, WAF & Firewall, Threat Modelling, DevSecOps, Kubernetes, Cloud Security, Kafka, MongoDB, Jira, Atlassian, Forescout and Nozomi. Open AI Services, Strategic AI Solutions, Data & AI Vision. Strong Authentication 2.0 experience. Strong experience in Cloud-Native Application Protection Platform (CNAPP) and Network Intrusion Detection System. Microsoft Sentinel and Microsoft Defender. Microsoft Defender (XDR): Protection & Detection Focus: Prevention and automated response to threats targeting Microsoft 365 services, endpoints, identities, and applications. Components: Defender for Endpoint, Identity, Office 365, Cloud Apps. Strength: Automated incident investigation and resolution. Microsoft Sentinel: SIEM & Analytics Focus: Centralized collection of log data, proactive threat hunting, and comprehensive security analysis. Features: Monitoring of the entire infrastructure (including non-Microsoft systems), automation (SOAR). Strength: Correlation of events from different data sources. Dynamic and Static Application Security Testing- DAST and SAST. Experience working with deep learning frameworks (e.g., PyTorch, TensorFlow). Experience with large language models (LLMs), transformers, or diffusion models. Familiarity with MLOps tools (e.g., MLflow, Weights & Biases, Docker, Kubernetes). ISMS in the automotive industry, GRC in the automotive industry Strong background in vehicle diagnostics, testing, or system validation Experience with CAN, LIN, FlexRay, Ethernet, and protocols like SOME/IP, TCP/UDP Ability to read and understand Java code (no coding required, just trace/debug) Familiarity with cloud/API topics – tokens, authentication, connectivity Comfortable using Linux/Android tools (ADB, Putty, logs) Experienced with tools like CANoe, Wireshark, ODIS, Idex Analyzing the IT landscape to identify vulnerabilities and potential for further development of the IT security architecture Development and implementation of protective measures against complex attacks and state-sponsored threats Design of a holistic IT security strategy in line with corporate goals and regulatory requirements. Excellent data center and data migration experience using risk management methods

• Review the entire lifecycle of user accounts
• Initiate improvements and necessary changes
• Collaborate with various stakeholders to improve IAM processes or solve problems
• Regularly review reports for invalid or unauthorized user accounts and unauthorized privileges
• Support quality management and compliance teams during internal and external audits
• Organize training for stakeholders to understand the IAM process and tools
• Set up a troubleshooting desk for all questions and problems and follow them up, e.g., through a ticket system, until a solution is found. Jira, Atlassian. IAM technologies and protocols such as OAuth2, OpenID Connect, SCIM, SAML, RBAC, ABAC, PSM, CPM, PVWA, PBAC, Privilege Cloud, CyberArc, Single Sign-On, and Multi-Factor Authentication. Using One Identity Manager to centrally manage digital identities, their accounts, and access permissions (Safeguard Privilege Sessions, Identity Manager, Active Roles, IMPI and SNMP Protocols, troubleshooting configurations SPS)

Authentication: Brute-force protection ■ Authentication: Bypass ■ Authorization: Bypassing authorization schema ■ Session Management: Log-out functionality ■ User password policies ■ Access control for API calls ■ Verify access tokens on every API request: Only those coming from external endpoints, JSON and XML. Forescout and Nozomi. Strong Authentication 2.0 experience. Strong experience in IAM technologies and protocols such as OAuth2, OpenID Connect, SCIM, SAML, RBAC, ABAC, PBAC, PSM, CPM, PVWA, Privilege Cloud, CyberArc, Single Sign-On, and Multi-Factor Authentication. Strong experience in AWS Security, AWS Architecture, Compliance, and BSI basic protection. SOC/SIEM on AWS, BSI C5 and AWS, BSI Security Standards. Using One Identity Manager to centrally manage digital identities, their accounts, and access permissions (Safeguard Privilege Sessions, Identity Manager, Active Roles, IMPI and SNMP Protocols, troubleshooting SPS configurations). Angular frontend development. In-depth experience in the architecture and implementation of Identity & Access Management systems with NETIQ (Identity Manager, eDirectory, SSPR, Advanced Authentication). Sound knowledge of designing client-specific IAM processes. Familiarity with regulatory requirements (in particular DORA, MaRisk, BAIT). Experience with connector development and integration into complex system landscapes. Knowledge of AD, SAP, LDAP, OUD, XML/XSLT, and scripting languages. Structured approach to work, solution-oriented thinking, and strong communication skills. ISMS in the telecommunications industry. GRC in the telecommunications industry. Analyzing the IT landscape to identify vulnerabilities and potential for further development of the IT security architecture. Development and implementation of protective measures against complex attacks and state-sponsored threats. Design of a holistic IT security strategy in line with corporate goals and regulatory requirements. Excellent experience with data centers and data migration using risk management methods.

Development and implementation of programs in C++ and Python in a Linux environment using virtual machine, Docker, container, bridge, Kubernetes, and DevOps technologies. Using cloud computing services from AWS and Azure.

Cryptographic applications in mainframe and client/server environments. Cybersecurity and penetration testing. Use of the Simple Certificate Enrollment Protocol within the Internet Engineering Task Force. Use and further development of the system that creates, distributes, and verifies digital certificates (PKI). Implementation and further development of ACSP - Advanced Cryptographic Service Provider on both mainframe and client/server sides. Machine identity protection: identifying types by orchestrating cryptographic keys and digital certificates for SSL/TLS, code signing, mobile, and SSH. Design and architecture of automated key and certificate lifecycle management using CI/CD platforms (Jenkins/GitHub Actions), and integration of tools into CI/CD. Definition of policies and practices for certificate lifecycle management. Testing of ACSP and its most important functions (cryptographic algorithms, cybersecurity, penetration testing). Creation of complete documentation - User Guide, Project Architecture Guide, PoW, operating manual, test case book, log and error files, etc. Use of CyberArk technology for Identity Security Solutions and Privileged Access Management. Identity Access Management, SailPoint. IBM Security Qradar SIEM

Leading data science projects in the chemical and pharmaceutical industries.

Analyzed and developed programs and designed financial applications for the insurance industry using: a) C++, JAVA, JavaBeans, J2EE, VBA, DB2 Applications, COM-Technologies, SAP Modules, PKI, DevOps, Security Concepts, Visual Age, Eclipse, UNIX. Mainframe/Client/Server, CICS; c) COBOL<->JAVA Interaction, UNIX Server, CICS JAVA interface , JAVA, J2EE, WAS Developer. b) C, COBOL, ADABAS, NATURAL, ISPW, DB2 Applications, JCL, TSO, CA-Endevor, CA Gen, CCC/Harvest – Mainframe environment, OS/390, PL1, ISPF, REXX, CICS, RACF, TCP/IP, VTAM, WLP/WOLA, system administration, IBM Z, DB2 zOS, VSAM/QSAM, MQ and batch scheduling systems

Analyzed and developed programs for postal code conversion. Customer: Deutsche Post, Köln, Germany. Analyzed and developed programs for the transition from a COBOL platform to SAP using MVS, COBOL, ADABAS, NATURAL, PL1, SAP, VSAM/QSAM, RACF, OS390, SAP, IMS, ISPF, REXX, CICS. Managed and led 2 major projects: migration from COBOL to the SAP platform and SAS (statistical analysis software). Worked closely with the customer, Bayer AG, as Project Manager and Project Leader. Strong experience in the chemical and pharmaceutical industries. Customer: Bayer AG. Leverkusen, Germany. Analyzed and developed programs for PLZ exchange using MVS, COBOL, SQL, DB2 Applications, ORACLE, OS390. Client: Deutsche Post. Cologne, Germany. Analyzed, planned and developed rating and billing programs in BSCS using UNIX, C, SQL, ORACLE. Managed a team of 20 and worked closely with 2 offshore companies from Ukraine. Worked closely and successfully with customers worldwide: North America, the Middle East, Eastern Europe, Africa, Asia. Customer: LHS. Dreieich, Germany. Analyzed and developed test programs for Y2K and statistical analysis using COBOL, ADABAS, NATURAL, PL1, JCL, TSO, SQL, RACF, VSAM/QSAM, DB2 Applications, SAS, IMS, OS390, SAP Finance. Customer: Bayer. Leverkusen. Germany. Analyzed, planned and developed programs for CICS JAVA Gateway using MVS, CICS, JCL, COBOL, PL1, ADABAS, NATURAL, SQL, VSAM/QSAM, DB2, IMS, OS390, JAVA. Customer: Karstadt. Essen, Germany. Developed test programs for Y2K using COBOL, PL1, JCL, Assembler, VSAM/QSAM, MVS, OS390. Developed and implemented specific stock price model scenarios. Monte Carlo simulations for various cases and situations. Automotive industry. Managed and led a major project for Ford AG in Cologne. Customer: FORD. Department name: Finance & Accounting Systems. Cologne, Germany.

Developed statistical models and programs for the insurance business. Project name: pension insurance. The implementation was done on: C, C++

Developed software for construction research, including calculation systems and graphical interfaces. Built calculation systems for bridges and foundations. Worked on mathematical and simulation modeling and multiprocessing systems. Implemented solutions using C, C++, SPSS, PL/1, PASCAL, Assembler, FORTRAN, ADABAS, NATURAL, SAS, and CLIPPER. Operating systems: Windows 3.x, UNIX, DOS, MVS