Данил

DANIL OBUSHKO
Security Lead | Cloud & OT Security | GRC
[open contact info](look above in the "contact info" section) · [open contact info](look above in the "contact info" section) · Kyiv, Ukraine · Remote / Hybrid
SUMMARY
Security Lead with 7+ years designing, implementing and governing security programs across enterprise IT and industrial OT environments, including current experience in the MilTech / defense sector. Combines hands-on security architecture depth (network, identity, cloud) with leadership of GRC, risk management and cross-functional security governance. Certified to expert level on both the Cisco (CCDE) and Microsoft (SC-100) security tracks. Track record of aligning security strategy with business objectives and building security-by-design into project lifecycles.
EXPERIENCE
Security Lead — MilTech (defense sector)03/2026 – Present · Ukraine
• Lead the security governance, risk and compliance (GRC) function, setting policy, risk appetite and control frameworks aligned to business and regulatory requirements
• Own enterprise risk assessment and treatment, prioritizing remediation across the organization's threat landscape
• Direct security architecture decisions across identity, network, cloud and endpoint domains, embedding security-by-design into project delivery
• Oversee incident response readiness and coordinate with monitoring/SOC functions to strengthen detection capability
• Represent the security function to executive stakeholders and support audit and compliance initiatives
Information Security Specialist (IT & OT) — MHP08/2024 – 02/2026 · Ukraine
• Led and maintained enterprise security controls across converged IT/OT environments
• Oversaw risk assessments and coordinated remediation activities across business units
• Governed secure architecture and security-by-design standards across project lifecycles
• Led implementation and governance of enterprise security platforms: IAM, PAM, EDR/XDR, SIEM, DLP, vulnerability management, email and network security
• Supervised incident response and partnered with the SOC to enhance detection and monitoring capabilities
• Aligned the security program with industry best practices and compliance requirements, raising organizational security maturity
Network Security Engineer / Security Lead — GREENNET2021 – 08/2024 · Ukraine
• Owned end-to-end network and security architecture for enterprise and carrier-grade projects (MPLS/L3VPN, SD-WAN), from HLD/LLD design through implementation and handover
• Acted as technical authority in presales — scoping solutions, sizing effort and defending architecture decisions before customer stakeholders
• Led multi-domain Cisco ISE deployments, integrating firewalls, SD-Access and SD-WAN across customer environments
• Defined design standards for network segmentation, secure remote access and perimeter protection
• Held technical ownership of delivered environments for stability, performance and security
Security Lead — Metinvest Digital01/2018 – 01/2021 · Ukraine
• Led enterprise network and security design for a large-scale industrial group
• Owned data center networking and security operations
• Defined security standards across application, endpoint and network layers
• Drove continuous monitoring and support of large-scale corporate environments
• Partnered with infrastructure and application teams to embed security controls into daily operations
Network Engineer — Lifecell01/2017 – 01/2018 · Ukraine
• Supported firewall migration, remote access and enterprise/wireless network operations for a national mobile operator
• Delivered rack and cable infrastructure deployment
KEY SKILLS
Security Architecture & Design · Network Security · Cloud Security · OT/ICS Security · Identity & Access Management · Threat Detection & Security Monitoring · Incident Response · Endpoint & Data Protection · Vulnerability & Risk Management · Security Governance & Compliance · Security Leadership & Stakeholder Management
TECHNICAL SKILLS
Network & Security: Firewalls, IDS/IPS, WAF, VPN, IPsec, TLS/DTLS, SD-WAN, MPLS, L3VPN, VRF
Frameworks & Compliance: ISO/IEC 27001, Zero Trust, Defense in Depth, security policies and standards, risk assessment, compliance alignment and audit support
Access Control & Monitoring: Cisco ISE, NAC, AAA, RADIUS, TACACS+, Microsoft Entra ID, SIEM, NTA, NetFlow
Routing & Switching: TCP/IP, BGP, MP-BGP, OSPF, EIGRP, VLAN, VXLAN, vPC, 802.1X
CERTIFICATIONS
Microsoft: Cybersecurity Architect Expert (SC-100) · Cloud and AI Security Engineer Associate (SC-500) · Identity and Access Administrator Associate (SC-300) · Security, Compliance and Identity Fundamentals (SC-900)
Cisco: Certified Design Expert (CCDE) · CCNP Security · CCNP Cybersecurity · CCNP Enterprise · Certified Specialist: Security Core, Enterprise Core, Data Center Core, Enterprise Design, Security Infrastructure Design, Security Identity Management · Cybersecurity Specialist: Cybersecurity Core, Forensic Analysis and Incident Response · CCNA Security · CCNA Routing & Switching
EDUCATION, TRAINING & LANGUAGES
Education: Bachelor's Degree — DonNU, Donetsk
Training: Cisco Networking Academy — Kharkiv
Languages: Ukrainian — Native · Russian — Native · English — Intermediate / Upper-Intermediate