Костянтин

Kostiantyn Yagusevych
SOC Analyst
[open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | github.com/kiurakku | hackerone.com/cloud9s |
Lviv, Ukraine

Profile
Offensive-minded security analyst who thinks like an attacker to defend like a defender. Active HackerOne
bug-bounty researcher; turns findings and monitoring data into faster detection and response.
Skills
Monitoring & Detection: ELK stack, Prometheus, Grafana, Loki, Alertmanager, incident investigation
Offensive Security: HackerOne bug bounty (hackerone.com/cloud9s), Nmap, Nessus, OSINT,
web/network pentesting fundamentals
Hardening: TLS/SSL, SSH hardening, RBAC, encryption, Cloudflare WAF/DDoS
Systems: Linux, SAP administration, Docker, Kubernetes, CI/CD, SAST/secret detection
Scripting: Python, Bash, Go, SQL (PostgreSQL, MySQL)
Experience
Arbitration Case Support Specialist, NICELY.GROUPOct 2025 – Nov 2025
Hybrid
● Cut incident-investigation time by implementing structured logging (Loki) and Prometheus metrics
for root-cause analysis.
SAP System Administrator, KindgeekJun 2025 – Sep 2025
Hybrid, Lviv
● Embedded SAST/secret-detection CI/CD gates and built Grafana security-monitoring dashboards,
improving visibility into access-related risk.
AI Access Intelligence Architect, IDENTRA AIApr 2026 – Present
Hybrid, Ukraine
● Design access-intelligence systems flagging anomalous access and decision patterns.
Junior DevOps Engineer, SoftServeFeb 2025 – May 2025
Remote, Part-time
● Containerized services with Docker/Kubernetes; maintained CI/CD pipelines.
Python & Cybersecurity Coach, American Young Coder SchoolNov 2024 – Mar 2025
Remote
● Taught Python and cybersecurity fundamentals to students.
Freelance Security & Full-Stack Developer — Contract, Self-EmployedOngoing
Remote
● Active bug-bounty researcher on HackerOne (hackerone.com/cloud9s); identified and reported a
vulnerability chain (information disclosure, blind SSRF, Cloudflare WAF bypass) on an enterprise
partner subdomain.
● Delivered 5.0/5.0-rated security and development work across Freelancehunt, Kabanchik, Upwork,
and Fiverr; hardened client infrastructure with custom Cloudflare WAF rules and encryption.
Education
B.S. in Cybersecurity — Lviv Polytechnic National University, 2023–2027 (expected)
Cybersecurity and DevOps — SoftServe IT Academy, 2025
Languages
Ukrainian — Native; English — B2 Upper-Intermediate; German, Polish — A2