Ruslan Safin curriculum vitae

# Ruslan Safin
##

> [linkedin.com/in/cybermaniac](https://www.linkedin.com/in/cybermaniac)

> [ruslan@v-office.kz](mailto:ruslan@v-office.kz)

------

### Personal Profile

The overall experience in IT companies in C-level positions is over 9 years.
 
As a hobby, I develop and maintain my pet project - hosting server infrastructure for solving daily home routines  (Technological stack: Docker, Hashicorp Nomad, Hashicorp Vagrant, Puppet, Ansible, Nginx, Cadyy, Traefik, HAproxy, and some useful web application).

------

### Languages

English: B1

Russian: native

------

### Experience

**EPAM Systems, Inc** *Chief Security Systems Engineer* __November 2019 - February 2022 __ (Belarus, Minsk)

In EPAM company, I was involved in managing the IT Security team and delivering projects in time.

A part of team activities hadn't relevant processes, and required reviewing and create flow for optimizing the process.

I've started from review processes and team responsibilities, and involve different teams to mitigate bottlenecks in processes. After that, I've been creating a process for managing privileged accounts and prepare the required technical stack.

As a result, I successfully delivered required project tasks as privileged account management, replacing EDR solution, and implement software-defined perimeter and compliance check solution.

**V-Office LLP** *Benevolent dictator for life (BDFL)* __October 2009 - Present__ (World Wide)

I solve from time to time cases involved questions and issues in the information security domain such as IT consulting, cybercrime investigation, etc.

**GoHost.kz** *Outsourse* __April 2013 - December 2019__ (Kazakhstan, Karaganda)

I have promoted and lead a few projects related to information security activities (Clients: Karaganda State Technical University, Daryn Partners LLP, Astana SPK LLP)

**Astel JSCP** *Director of Information Security* __August 2019 - November 2019__ (Kazakhstan, Almaty)

Build fundament for the Information Security Unit. Prepared Information Security policy and have prepared the unit to pass the certification by the National Security Committee.

**ELTC LLP** *Outsource* __January 2018 - August 2019__ (Kazakhstan, Almaty)

I have been Linux, PostgreSQL, Cisco R&S, and Information Security, trainer.

**TransTelecom JSCP** *Expert* __February 2018 - March 2019__ (Kazakhstan, Astana)

Crisis management.

SOC (security operation center) as a service for telecom/service provider company:

* ISMS administration and control
* Incident response
* Forensics
* Vulnerability management

(Technological stack: R-Vision, Positive Technologies Full Stack, Kaspersky, Infowatch, PaloAlto)

**KazATU University** *Teacher* __September 2018 - December 2018__ (Kazakhstan, Astana)

I have taught students for an information security course.

**Branco Etera Ltd** *Outsourser* __October 2017__ (Kazakhstan, Atyrau)

I have led a deployment information security environment.

**Life 2 Win LLP** *CTO* __June 2016 - September 2017__ (Kazakhstan, Almaty)

CTO with verifiable year-after-year success achieving revenue, profit, and business growth objectives within start-up, turnaround,  and rapid change environments.  
Successfully delivered a few projects involved many peoples to implement these solutions.

* DLP system implementation for a bank (Technological stack: Symantec DLP)
* Deliver migration project of a virtualization platform for a telecom company (Technological stack: Red Hat Virtualization platform)
* Deliver a project to Anykey LLP company include network segmentation and security improvement (Technological stack: UTMbox)
* Have successfully implemented public WiFi infrastructure in the ARMADA-mall with authentication via a captive portal and traffic prioritization (Technological stack: UTMbox)
* Have more than teen security conference participation and Standup
* Have opened the R&D department, and started sale new products (Technological stack: UTMbox)

**SoftLine LLP** *Contractor/Independent Consultant* __June 2016 - November 2016__ (Kazakhstan, Almaty)

I have been involving in managing remote consulting and infrastructure support teams for Kazcontent company IDC. (Technological stack: Cisco ASA and Catalyst, Citrix Netscaler, Brocade SAN switches, Hitachi Storage, and a few Servers. The software part is Citrix Xen Server, Ubuntu, and Red Hat/Fedora/CentOS Linux)

**SoftLine LLP** *Team Lead* __May 2013 - May 2016__ (Kazakhstan, Almaty)

Tasks coordination. Sales department and customer consultancy on understanding issues (translation from Business language to IT and back).

* Was involved as a team lead in delivering the IDC migration project for the Kazcontent company (Technological stack: Juniper routers and firewalls, IBM Storwize storage, SystemX PureFlex servers, Hitachi storage, and Citrix NetScaler.)
* Was successfully deployed and configured the DLP policy at the Financial Police Department (Technological stack: DeviceLock DLP)
* Have been involved in the remote deployment and configuration of Citrix Netscaler appliances with High Availability, load balancing, and web application protection for North Caspian Operating Company (Technological stack: Citrix Netscaler Application Firewall)
* Provided remote consultancy and disaster recovery of the next-generation firewall for KazMunaiGas Exploration Production (Technological stack: CheckPoint appliances)
* Involved in developing backup and disaster recovery infrastructure for 1st Tier3 IDC in Kazakhstan (Technological stack: Veeam Backup and Replication)

**MONT Ltd** *Business Development Manager* __April 2012 – April 2013__ (Kazakhstan, Almaty)

Partners consultancy on technical issues. Maintain partnerships with vendors.  
Symantec brand promotion (company received **Enterprise Partner** status).  
I have been involved in training in areas of information security, virtualization, and backup for partners and employees.

I have been achieved year to year growth as a business development manager for VMware, Veeam, Symantec, McAfee, CheckPoint, and TrendMicro products. 
I have been involved in a partner network expansion, partner training, sales improvement in the Central Asia region.

**Buhgalter.kz** *Outsourcer* __August 2012__ (Kazakhstan, Almaty)

I solved an issue with server recovery after a hacker's attack (Technological stack: Freebsd Apache + MySQL + PHP + FTP). Investigation revealed a hacker's identity. In the process of identifying vulnerabilities was analyzed HTML and PHP code.

**KaR-Tel LLP "Beeline"** *Senior Engineer/Team Lead* __January 2012 – April 2012__ (Kazakhstan, Almaty)

I've managed a team to build network infrastructure (FTTB) design for Almaty city and the Almaty area (total population of about 3 million people). I've managed the work of a group of 200 workers who involved equipment installation within the area.

**Hoster.kz** *Outsource* __November 2011 - December 2011__ (Kazakhstan, Karaganda)

* I was involved in the security of the server infrastructure design (Technological stack: Cisco ASA, Cisco IPS, Cisco MARS, Cisco Catalyst 29xx, and 35xx) 
* Consulting on software and server configuration (Technological stack: HP DL360 using OpenVZ, KVM, Xen, Exim, Postfix, MySql, PostgreSQL, and HP storage).
* Security system integration with Nagios monitoring system.

**Kazakhtelecom JSC** *Senior System Engineer* __July 2009 – September 2011__ (Kazakhstan, Karaganda)

I have been involved in supporting network infrastructure, and data center administration.  
I've managed a group of 7 people who were involved in infrastructure deployment for project activities: OSCE summit in 2010, the Summit of Shanghai Cooperation Organization, 7 Summit of Islamic Economic Forum.

### Talks

* [**sysconf.io**](https://sysconf.io/) [__September 27 2019__](https://19.sysconf.io/) [*SELinux - base, tips and tricks*](https://selinux.netlify.app/) [Translation Zoom](https://youtu.be/V-Pbk9SdHXY?t=4817), [Translation front camera](https://youtu.be/6ozKlQLALAA?t=2108)

* [**nur.kz**](https://www.nur.kz/1790281-cem-kazahstanskie-it-produkty-lucse-resenij-iz-ssa-rossii-i-izraila.html) __April 22 2019__ Why IT products from Kazakhstan are better than solutions from the USA, Russia, and Israel [repost on ok.ru](https://ok.ru/eurasiastar/topic/69524097742268), [repost on vk.com](https://vk.com/@eurasiastar-chem-kazahstanskie-it-produkty-luchshe-reshenii-iz-ssha-ross)

* **[Nazarbayev University](https://nur.nu.edu.kz/handle/123456789/3753): [Safer Internet Day celebration](https://nulits.nu.edu.kz/safer-internet-day/safer-internet-day-celebration/)** __February 5 2019__ [Digital Hygiene Presentation](https://nur.nu.edu.kz/handle/123456789/3774)

* [**PROFIT Cloud Day**](https://profit.kz/photos/1199/PROFIT-Cloud-Day-2017/) __March 15 2017__ [Load balancing: basic algorithms and methods](https://profitday.kz/pdf/cloud2017/2-1.pdf), [Intro](https://youtu.be/lK2lrIcLdHc?t=11286), [Talk](https://youtu.be/lK2lrIcLdHc?t=11946)

* [**PROFIT Mobile Day**](https://profit.kz/photos/1196/PROFIT-Mobile-Day-2016/) __December 9 2016__ [Support speaker on Q&A session](https://youtu.be/Mtl2ho_E074?t=12449), [Link to the presentation](https://profitday.kz/pdf/mobile2016/2-3.pdf)

* [**ProfitSecurityDay**](https://profit.kz/photos/1194/PROFIT-Security-Day-2016-foto/) __November 24 2016__ [*SELinux - basic principles and techniques*](https://profitday.kz/pdf/security2016/2-3.pdf), [Talk](https://youtu.be/gyugFuvwtgY?t=8187), [Discussion](https://youtu.be/gyugFuvwtgY?t=10453)

### Patents

* [**Сertificate of entering information into the state register of rights to objects protected by copyright #240**](https://copyright.kazpatent.kz/?!.iD=o6nq) __October 19 2018__ computer program UTMsense date of creation February 14 2003

* **Utility model** Method for detecting and preventing malicious / virus activity of a local area network in working with external and internal networks __November 23 2018__ [EXTRACT FROM THE STATE REGISTER OF UTILITY MODELS OF THEREPUBLIC OF KAZAKHSTAN](https://gosreestr.kazpatent.kz/Utilitymodel/DownLoadFilePdf?patentId=304456&lang=en) [Detailed information: Utility model #4203](https://gosreestr.kazpatent.kz/Utilitymodel/Details?docNumber=304456)

### Academic Qualifications

**Master of Science in Information Technology** __2007 - 2009__ [Karaganda State Technical University (KSTU)](https://www.kstu.kz/), Karaganda, Kazakhstan

**Master of Science in Microprocessor-based  Systems in Industry** __2008 - 2008__ [Saint Petersburg State Polytechnical University (SPbSTU)](https://www.spbstu.ru/), Saint Petersburg, Russia
 
**Engineer of Information Technologies** __2002 - 2007__ [Karaganda State Technical University (KSTU)](https://www.kstu.kz/), Karaganda, Kazakhstan

### Key Courses

* Project Management Foundations: Risk - PMI (Project Management Institute) and NASBA (National Association of State Boards of Accountancy)
* Negotiating Your Leadership Success - PMI (Project Management Institute) and NASBA (National Association of State Boards of Accountancy)
* CISSP Cert Prep: The Basics - CompTIA (Computing Technology Industry Association)
* Conducting Motivational 1-on-1 Reviews - LinkedIn Learning
* Deploying Azure File Sync - LinkedIn Learning
* Certified Ethical Hacking (CEH) Course - Udemy
* Ethical Hacking Nmap Course - Udemy
* Wide Area Networks and Networking Services and Security - Alison
* Understanding Cryptography and Its Role in Digital Communications - Alison
* IT Management - Building Information Systems - Alison
* Introduction to Corporate IT Strategy and Business Frameworks - Alison
* Fundamentals of Network Security - Alison
* Sales in consulting style - Improver training center 
* PaloAlto networks Accredited Sales Expert (ASE) v3.0 - Module2
* PaloAlto networks Accredited Sales Expert (ASE) v3.0 - Module1
* IBM Elastic Storage System (ES) Administration Basic 4.1 for Linux 
* IBM Power Systems for AIX - Virtualization I: Implementing Virtualization
* VMware vSphere: Design Workshop [V5.x]
* VMware VTSP-SV (Server Virtualization 5)
* VMware VTSP - IV (Infrastructure Virtualization 5) 
* VMware vSphere Resource Management Essentials 
* VMware vCenter Converter Standalone 
* VMware vCenter Update Manager 
* VMware vSphere Security 
* VMware Assessment Fundamentals 
* VMware vCenter Operations Management Suite Technical Overview[V5.6] 
* VMware Introduction to vCenter Operations Manager 
* Symantec Data Loss Prevention 11 Sales Training
* Symantec Data Loss Prevention 10.0 Sales Training – Russian
* Symantec Backup Exec 2010 Sales Training – Russian
* Symantec Backup Exec 2012 Sales Training
* Symantec Data Loss Prevention 11/11.5 SSE+ training
* Symantec Backup Exec 2012 SSE+ training
* Symantec Data Loss Prevention 11.0: Install and Deploy
* Symantec Data Loss Prevention 11.0: Administration
* Symantec Data Loss Prevention 11.5: Administration
* Center of Excellence«KazakhTelecom» Cisco courses 1.1 — 1.2

### Certificates

* Hurricane Electric: IPv6 Certification rank Sage
* VTSP-SV 2017: Data Center Virtualization Fundamentals Test
* VTSP-SV 2017: Server Virtualization for Technical Sales Professional Test
* VSP-SV (Server Virtualization 2017)
* Red Hat Accredited Professional
* Kaspersky Lab Certified Professional
* VMware VCP6-DCV VMW-01891588W-00571393
* Kaspersky Lab Certified Systems Engineer
* PaloAlto Networks Accredited Configuration Engineer (ACE) Exam - PAN-OS 7.0 Version
* PaloAlto Networks Advanced Threat Management for PAN-OS v6.0
* PaloAlto Networks ASE v3.0 Final Test
* VMware VSP Mobility 2015
* Symantec Technical Specialist NetBackup 7.5
* Symantec Sales Expert Plus NetBackup 7.6
* Symantec Sales Expert Plus NetBackup 5230 Appliance
* Symantec Sales Expert NetBackup 7.5
* MCTS: MS 673 Designing, Assessing, and Optimizing Software Asset Management (SAM)
* MCTS: MS 672 Designing and Providing Volume Licensing Solutions to Large Organizations
* MCTS: MS 671 Designing and Providing Volume Licensing Solutions to Small and Medium Organizations
* VMware VCP5-DCV VMW-01891588W-00571393
* VMware vSphere: Design Workshop [V5.x]
* Microsoft Certified Professional MS 247 Configuring and Deploying a Private Cloud with System Center 2012
* VMware VTSP-SV (Server Virtualization 5)
* VMware VTSP - IV (Infrastructure Virtualization 5)
* Avanpost Technical Specialist
* Device Lock Security Officer
* CyberArk Certified Engineer
* Symantec Technical Specialist Symantec Data Loss Prevention 11.5
* Symantec Sales Expert Symantec Backup Exec 2010
* Symantec Sales Expert Symantec Backup Exec 2012
* Symantec Sales Expert Symantec Data Loss Prevention 10
* Symantec Sales Expert Symantec Data Loss Prevention 11.5
* Symantec Sales Expert Plus Symantec Backup Exec 2012
* Symantec Sales Expert Plus Symantec Data Loss Prevention 11.5
* Analyst active infections and infected systems by Dr.Web anti-virus software
* Administration Specialist products Dr.Web ® for Windows
* Administration Specialist Dr.Web ® for MS ® Exchange Server
* Administration Specialist Dr.Web ® Enterprise Security Suite
* Certified Technology Specialist ESET NOD32
* Certificate of Excellence Win-RAR
* Administration Specialist Dr.Web® AV-Desk™

### Publications

* **Scientific and technical journal "Computer Automation"** 1-2 (22-23) 2008 __ISSN1560-7305__, *"Working with the USB-devices"* UDC 004.326.1

* **International Symposium "Information and communication technologies in the industry, science, and education," the 55th anniversary devoted KSTU** 13-14.10.2008 Karaganda Kazakhstan, __ISBN 9965-04-186-5__ UDC 004:378 (574), *"Harnessing the power of Windows to connect non-standard USB devices "*

* **International Scientific and Practical Conference "Research, development, and application of high technology in the industry"** 22-23.04.2010 St. Petersburg Russia, __ISBN 978-5-7422-2557-7__ BBK 20:30:60, *«Use of facilities for Windows connections broken USB devices »*

* **International Symposium "Information and communication technologies in industry, education and science"** 28-29.10.2010 Karaganda Kazakhstan, __ISBN 9965-04-600-X__ UDC 004:378 (574) BBK 74.58-21, *"The role of the network community of teachers to improve their professional competence "*

* **International Symposium "Information and communication technologies in industry, education and science"** 28-29.10.2010 Karaganda Kazakhstan, __ISBN 9965-04-600-X__ UDC 004:378 (574) BBK 74.58-21, *"The problem of accessibility of user interfaces of electronic educational resources"*

* **International Conference on "Science and Education - a leading factor Strategy" Kazakhstan-2030 ""** 23-24.06.2011 Karaganda Kazakhstan, __ISBN 978-601-296-055-6__ UDC 001:378 BBK 74.58, *"The role of the network community of teachers in improving their professional competence "*

* **International Conference on "Science and Education - a leading factor Strategy" Kazakhstan-2030 ""** 23-24.06.2011 Karaganda Kazakhstan, __ISBN 978-601-296-055-6__ UDC 001:378 BBK 74.58, *"The decisions of economic efficiency and competitiveness in the global education market with certification "*

* **International Conference on "Science and Education - a leading factor Strategy" Kazakhstan-2030 ""** 23-24.06.2011 Karaganda Kazakhstan, __ISBN 978-601-296-055-6__ UDC 001:378 BBK 74.58, *"Experience in the development and use of interactive digital educational Internet resources based on GIS technologies "*

* **International scientific-practical conference "Fundamental and applied research, development, and application of high technology in; industrial"** 27-29.04.2011 St. Petersburg, __ISBN 978-5-7422-3022-9__ BBK 20:30:60, *«Solution of economic efficiency and competitiveness on the world education market by using certification center»*

* **International scientific-practical conference "Fundamental and applied research, development, and application of high technology in; industrial"** 27-29.04.2011 St. Petersburg, __ISBN 978-5-7422-3022-9__ BBK 20:30:60, *«Role of the network community of teachers in enhancing their professional competence »*

* **International scientific-practical conference "Fundamental and applied research, development, and application of high technology in; industrial"** 27-29.04.2011 St. Petersburg, __ISBN 978-5-7422-3022-9__ BBK 20:30:60, *«The problem of the access user interface of electronic learning resources»*