Pavel Gusev

Management of releasing products certification under russian and international standards and regulations, e.g. ISO 15408. Establishment of the Secure development lifecycle process in the company using recommendations of NIST (e.g. NIST SP 800-64), the OWASP materials and requirements of ISO 27000 series. Translation regulatory and business requirements into technical project requirements. Consulting of development teams in security aspects. Liaison with testing laboratories and regulatory agencies.

Management of the certification process under russian regulatory agencies requirements. Translation of regulatory and business requirements into technical project requirements. Consulting of development teams in security aspects. Preparation of certification documentation (e.g. Security Target from ISO 15408). Liaison with testing laboratories and regulatory agencies. Mentoring trainees.

Management of software development team. Code analyzers development and release. Competitor analysis. Participation in marketing events. Task management. Day-to-day management. Teaching students the basics of vulnerability assessment.

Search for new clients. Making of contracts. Conducting of forensics. Review of other forensics expert's reports. Appearance in court as an IT security expert.

Creation of user manuals and other documentation to IT security solutions under development.

As an IT security student I learned cryptography, networking, steganography, laws and regulations, broad spectrum of mathematics and physics, algorithms, coding, etc. My diploma project was on development of digital fingerprint solution for mpeg-4 video. The idea was to identify illegal broadcasting of copyrighted videos without adding watermark and thus tampering with the video itself. Diploma project was rated "excellent".