Mustafa Issabayev

Developed 5 years cyber security improvement roadmap, optimized resources and saved $5M Analyzed software architecture, threat analysis. Analyzed application security by pentests and automated security tests. Made integration of security assessment tools into CI/CD pipeline, security testing automation. Monitored SIEM, IPS and Antivirus logs. Reviewed Mail gateway, proxy, WAF activities. Investigated incidents. Performed scheduled vulnerability scanning, analyzed reports

Was a part of technical team which conducted penetration tests for clients. Assessed IT infrastructure and security level of clients and provided actions plans to mitigate. Implemented various security solutions on client side (SIEM, network security tools, endpoint and email security tools). Implemented ISMS and helped pass ISO 27001 audit for clients

As part of internal IT audit team assessed the level of information security of the bank. Conducted regular pentest for the bank and subsidiary companies’ IT infrastructure. Assessed the effectiveness of existing security controls, security solutions and business processes. Automated some operational tasks of internal audit team by creating data analysis tool. The backend and logic were in python, user interface was created using CSS Bootstrap.

Main responsibility was to maintain and support full stack of corporate web applications. Developed new functionality for company web apps. Used php Kohana and Yii frameworks for backend, frontend developed using HTML5, CSS3, JQuery and AJAX. Maintained and supported databases for web apps, which included PostgreSQL and MySQL. Maintained and supported hosting servers (Linux CentOS, Windows).