Alexander Leonov

Tinkoff is Russia’s leading provider of online retail financial services with over 6 mln customers across the country. I developed and deployed there vendor-neutral cost-effective automated Vulnerability Management system highly integrated with existing IT systems and processes using several network and web application vulnerability scanners and various IT data sources: Wiki, DNS, WAF/AntiDDoS, AD, Monitorings, etc.

Established automated vulnerability management and security event management process. Integrated various IT and IS systems through the APIs.

Built the Competitive Intelligence function in company from the ground-up. Produced various product comparison reports for inside customers (marketing, sales, presales, R&D) and outside customers (partners, end-users). Markets: Vulnerability Management, Policy Compliance, Web Application Firewall, Web Application Scanner, Application Security Testing (SAST/DAST/IAST), Anti-APT, SIEM.

Implemented scan quality assessment methodology for the Vulnerability Management products. Developed set of tools to automate Vulnerability Scanner evaluation. In cooperation with Presale Department made number of comparisons with competitive products and practically confirmed advantages of the company's flagman product.

Formalized and implemented security guidances for various *NIX systems (FreeBSD, HP-UX, AIX, OES NetWare, Solaris, RHEL, Ubuntu, Debian) in company's compliance management products (MaxPatrol and XSpider).

Developed an application for electromagnetic compatibility evaluation (HPC system based on Sun Blade, OpenMPI, C/C++, OS Solaris, Linux).