IT Systems Design and Security Assessment

Hands-on CTO, developer with an extensive background in offensive cybersecurity and in-depth experience of the security of LLM/AI and IoT systems, as well as complex API and software systems.

????????? ??????????: Gap analysis and compliance support for ISO27001 (incl. annex A controls integration), ETSI EN 303 645, RED, Cyber Resilience Act (CRA), NIS2, EU AI Act; advising on emerging AI governance requirements.

?????? ?????????, ??????? ???????, ??? ??????????? ???????: Ensuring AI systems, OT/(I)IoT/robotics systems, web apps, and APIs are robust and secure against practical attacks and malfunctions.

?????-?? ????????? ????????????: This involves identifying system and security requirements, as well as selecting technology stacks and protocols for the secure integration of AI/LLM, the cloud, microservices and data flows. Designing and implementing DevSecOps pipelines, microservices, and protocols. Integration of applied cryptography, TPM/HSM key storage and related procedures and protocols.

?????? ???? & ???????? ?????? ??? ???????????: Establishing secure development processes (including secure AI SDLC) relying on MITRE ATT&CK/DEFEND.

????????????? ??? ???????? ??????????: Setting up and running vulnerability, incident, bug bounty, security triage, continuous threat modelling, risk management practices and disaster recovery.

AI/LLM Security Architecture & Assessment: Designing and securing LLM-driven systems and pipelines. Threat modelling for LLM apps, prompt engineering with guardrails, input/output sanitisation, context isolation, PII handling, evaluation and red-teaming of model behaviour.