Ruslan

Ruslan​ Ruslan Kurtveliiev​
Kurtveliiev [відкрити контакти](див. вище в блоці «контактна інформація»)
[відкрити контакти](див. вище в блоці «контактна інформація»)
Penetration Tester

ㅡ Penetration testing practitioner with hands-on experience across
the offensive and defensive sides of AppSec: penetration testing
Languages
in a regulated banking environment, bug bounty triage across 25+
1.​ Ukrainian: fluent programs at HackenProof, and reverse engineering of
2.​ Russian: fluent close-to-metal software. Building toward a career in offensive
(unfortunately) security and red teaming.
3.​ English: C1+
4.​ German: A2​

ㅡ​
Soft Skill
1.​ Adaptability Experience​
2.​ Attention to detail
3.​ Documentation skills
HackenProof / Application Security Triage Analyst (Web &
4.​ Stress management
Mobile)
5.​ Time management
May 2026 - present (June 2026) , Kyiv, Ukraine
ㅡ 1.​ Triaged vulnerability reports across 25+ active bug bounty
Hard Skills programs spanning fintech (DeFi), mobile, and SaaS targets —
assessing validity, severity, and business impact.
2.​ Resolved technical disputes between security researchers and
1.​ Application Security:
program owners, requiring deep knowledge of attack chains and
OWASP Top 10, manual clear written communication with both sides.
secure code review, threat 3.​ Experimented with automating triage workflow using the
modeling. company's MCP server + second brain + mindmap.
2.​ Tooling: Trivy, Invicti,
Raiffeisen Bank Ukraine / Application Security, Penetration
Acunetix, Tenable Nessus &
Tester, Security QA Automation
SC, Burp Suite, ZAP,
Cymulate, CodeQL, November 2025 - present (June 2026) , Kyiv, Ukraine
Dependabot, GitHub 1.​ Conducted manual and automated penetration tests at scale
Secrets, nmap, nuclei, across both monolithic and microservice architectures utilizing
BloodHound & etc. a broad set of tools.
3.​ CI/CD & DevSecOps: 2.​ Performed verification tests to confirm that identified
Terraform, Terragrunt, vulnerabilities were successfully patched by the development
team.
CI/CD security checks,
3.​ Collaborated on the development of next-generation Red
container security. Teaming automation, integrating AI agents with internal
4.​ Languages: C, Rust, Python, white-box data to identify complex attack vectors.
JS, Go (learning).
Confidential (NDA) / Junior Reverse Engineer
5.​ Databases: OLTP (MySQL &
others) + OLAP (DuckDB) December 2024 - September 2025 , Kyiv, Ukraine

1.​ Worked on a close-to-metal anti-tampering software.
2.​ Advocated for a clean-code mentality in SDLC.
3.​ Was the first one to explore AI for automated deobfuscation &
 obfuscation of the code (Ghidra).​
TAS & izibank / System administrator
June 2021 - December 2023 , Kyiv, Ukraine

1.​ Developed a ticket system between departments to work with
the company's equipment.
2.​ Set up an automated system for backups of CCTV camera
recordings at the company's head office in Kyiv.

BUILDCOM.UA / System administrator
March 2019 - February 2021, Kyiv, Ukraine

1.​ Assembled a system to store estimates for each client.
2.​ Migrated company’s information to a more secure server in less
than 1 day.
3.​ Completely modernized the company's networking hardware.

​
Education
Kyiv School of Economics/ Bachelor of Cyber Security
September 2024 - present (graduating in 2028), Kyiv, Ukraine

Relevant Coursework: Web-concepts, System administration , Network
Security, Penetration Testing, Project Management, CI/CD Security,
Infrastructure & Security as Code, Cloud Infrastructure, Threat
Modeling, FinOps, OS Security.

IT-Step / CS Major
August 2016 - May 2021, Kyiv, Ukraine

Relevant Coursework: Computer Science Basics, Programming
Languages (Python, Web Development: HTML, CSS, JS). Databases
(MySQL, MongoDB).​
Additionally: Graduated with one of the highest ratings on the list.

​