Andrew Krasichkov | Lead Information Security Engineer

About

For the past couple of years, I have been doing something between application and infrastructure security. When needed, I build the tools, services, and whatever else it takes to get the job done.

In my spare time, I try to make my life more convenient with various technologies, run an irregular tech blog, and walk my cat =^._.^=

Work Experience

Yandex

2016 - Present

Information Security Engineer

Fixed an endless number of things. Broke an endless number of things.

Along the way, I was directly involved in many projects, including but not limited to:

Built a process and software for detecting and preventing leaks of various secrets
Built software and migrated 10k+ employees to SSH certificates and passwordless sudo, with keys stored in YubiKey/Secure Enclave
Built and deployed an eBPF-powered agent to 100k+ nodes to collect events from containers and hosts
Built a process and software for static analysis of containers, environment misconfigurations, and so on

Effectively replaced the security department. From application to infrastructure security. From SDLC to developing security features.
Audited product and cloud infrastructure security. Reviewed architectures and developed new product security features, such as SAST and DAST.

A2 Entertainment

2009 - 2011

Game Development Jack-of-All-Trades

Together with a partner and a small team, I developed 2D casual PC games in C++. As is often the case in indie development, the work involved many adjacent areas besides development itself.