Костянтин

KOSTIANTYN YAGUSEVYCH
SECURITY ENGINEER — DEVSECOPS

CONTACT PROFILE

[відкрити контакти](див. вище в блоці «контактна інформація») Security-focused engineer combining a backend/DevOps background
with hands-on application and infrastructure security work: SAST
@thefear007 integration, WAF configuration and server hardening. Active
[відкрити контакти](див. вище в блоці «контактна інформація») independent bug bounty researcher on HackerOne.
Lviv, Ukraine · Remote
WORK EXPERIENCE
[відкрити контакти](див. вище в блоці «контактна інформація»)
IDENTRA AI 2024 – Present
hackerone.com/cloud9s
Backend Developer (Security-adjacent)
SKILLS • Contribute to access-control logic and audit logging for an AI-based
access-intelligence platform.
OWASP Top 10 & SAST • Added structured logging (Loki) and metrics (Prometheus) to support
security monitoring.
Cloudflare WAF & DDoS Mitigation
SSH Hardening & TLS/SSL Self-employed 2023 – Present
Prometheus, Grafana, Loki Security Consultant (Freelance)
Bug Bounty (HackerOne) • Ran security audits for e-commerce and SaaS clients, identifying and
remediating OWASP-class issues.
RBAC & Access Control
• Configured Cloudflare WAF rules and DDoS protection for client
LANGUAGES platforms.
• Hardened VPS servers: SSH key-only auth, fail2ban, firewall rules,
Ukrainian — Native TLS/SSL setup.
Russian — C1
Kindgeek 2024
English — B2
SAP System Administrator
Polish — A2
• Integrated SAST scanning and secret detection into the CI/CD
German — A1 pipeline, aligned with OWASP practices.
EDUCATION

B.S. Cybersecurity — Lviv
Polytechnic (in progress)
DevOps & Cybersecurity —
SoftServe IT Academy, 2024
Basic Programming — IT Step
Academy, 2019–2021
Python Developer Program —
GrandIT, 2019–2021
Ethical Hacking (White Hat) —
course certificate