+ Designed and implemented Data Privacy plugin (masks or removes sensitive data from cloud) https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/security/concept/data-privacy.html

+ Designed and implemented Data Discovery plugin (scans and collects stats about sensitive data) https://docs.servicenow.com/bundle/washingtondc-platform-security/page/administer/security/concept/data-discovery.html

+ Implemented sensitive data discovery and anonymization powered by Artificial Intelligence (model-based discovery)

+ Supported ServiceNow cloud security products in production

+ Mentored interns \ junior engineers

Being a Senior Software Engineer at Application Security team, I was responsible for bringing security infrastructure to the next level by building new tools / services that are shared by multiple teams at Workday.

+ Designed and implemented network filtering platform that helped to significantly improve security of utilization of external services by internal Workday applications

+ Mentored & trained new engineers, code reviews

+ Participated in regular penetration testing and security vulnerabilities research sessions

Languages: Java, Kotlin

Technologies: AWS, Spring Framework, Envoy Proxy, Redis, Alpaca, SSL, Rabbit MQ, Encryption, REST, HTTPS, Mongo DB

+ Designed and implemented Security HealthCheck - settings evaluation dashboard (US Patent 10,628,590 B2 "APPLICATION SECURITY ASSESSMENT" ). Demo: https://www.youtube.com/watch?v=jC0ciHZrkh0

+ Improved platform security algorithms for salesforce.com core application

+ Enhanced platform protection against XSS \ CSRF \ Clickjacking etc.

+ Trained & mentored junior engineers (code reviews, presentations etc.).

+ Developing infrastructure frameworks for automated testing of the top virtualization products (Virtual Center, vCloud Director)

+ Reviewing Java code and providing technical guidance for team members

Software Engineer contractor at No1 web search company, worked onsite. "Analytics" is one of the most complex and popular traffic web stats platform in the world.

+ Designed and implemented base classes of framework used for HTTP request \ response front-end testing (Java)