On-site DevSecOps engineer in Moscow building and securing CI/CD pipelines for the company's own code-analysis and security-testing tools. Day to day: integrating SAST/SCA/DAST, secret scanning and fuzzing, security gates, Linux administration, containers, IaC, artifact repos, SBOM automation, and aligning with GOST R 56939-2024 secure development.