Uladzislau Murashka
SECURITY ARCHITECT | CYBERSECURITY LEAD ENGINEER
info@sm0k3.net linkedin.com/in/sm0k3 sm0k3.net Remote (GMT +3)
Executive Summary
Certified Ethical Hacker and Security Architect with 11+ years of progressive cybersecurity leadership. Proven expertise in building and scaling high-performing security teams, delivering enterprise-grade penetration testing and compliance solutions. Demonstrated track record of growing cybersecurity revenue from ground level to $1M+ annually while maintaining 60% client retention. Specialized in advanced threat assessment, security architecture, compliance frameworks (ISO 27001, PCI DSS, HIPAA, SOC2, GDPR), and AI-driven security automation.
Professional Experience
Cybersecurity Architect | Advisory Services
CyberSecuriosity / Yellow Systems / Individual Consultant
2025 - Present / 2023 - Present / 2020 - Present
Leading cybersecurity advisory and architecture for multiple organizations, providing expertise in HTP compliance, blockchain/crypto security assessments, and OWASP security training.
Crypto consulting serving ~60% of HTP residents in Belarus with penetration testing, audits, and regulatory compliance
5+ years of Fiverr-based consulting specializing in infrastructure vulnerability management and VPN solutions
OWASP trainer delivering high-quality security testing methodology to IT professionals and organizations
Cybersecurity Team Manager | Architect | Pre-Sales
ScienceSoft
November 2021 - August 2025 | Dubai, UAE
Directed strategic growth and operational excellence of cybersecurity division, scaling team from 1 specialist to 12+ professionals generating $1M+ revenue with controlled costs under $200K annually.
Built team from zero achieving 100+ projects/year with 60% recurring clients
Optimized internal processes and infrastructure, achieving 48-hour response for client requests
Implemented ISO 27001, PCI DSS, HIPAA, SOC2, CCPA/GDPR compliance frameworks for enterprise clients
Developed AI-driven security automation initiatives reducing manual workload and improving efficiency
Enhanced pre-sales processes and technical documentation, achieving high conversion rates from leads to projects
Established KPI-based performance review system and refined team distribution (commercial vs. bench allocation)
Lead Security Engineer | Advisory | Pre-Sales
ScienceSoft
January 2020 - August 2021
Led cybersecurity services expansion, overseeing documentation development, service offerings, and technical team leadership with focus on pre-sales and compliance projects.
Managed team of 6+ specialists across penetration testing and vulnerability assessment projects
Delivered security solutions for international banks, telecoms, e-commerce, and healthcare organizations
Executed SOC2, HIPAA, PCI DSS, GDPR compliance projects and authored presentations for industry webinars
Architected cloud security assessments (AWS) and comprehensive vulnerability assessment methodologies
Lead Pentester | Cybersecurity Project Manager
ScienceSoft
February 2017 - January 2020
Developed commercial penetration testing direction from ground level, implementing security infrastructure, and building high-performing technical team while managing complex client engagements.
Initiated penetration testing service line resulting in hundreds of successful projects and client engagements
Implemented enterprise security infrastructure: IDS/IPS, 2FA, DLP, and SIEM solutions
Executed black-box, white-box, and grey-box penetration tests on web, mobile, and network infrastructure
Provided security incident investigation and forensic analysis services to enterprise clients
Architected team training programs and internal knowledge base for continuous capability improvement
Pentest Engineer | Security Consultant
ScienceSoft
February 2015 - February 2017
Conducted offensive security assessments and guided internal security infrastructure development including SIEM, MDM, and IDS implementations.
Executed commercial penetration testing projects (black-box, white-box, grey-box methodologies)
Implemented SIEM, monitoring, MDM, and IDS solutions; managed security incident investigations
Developed SIEM detection rules and security response procedures for enterprise environments
Linux Administrator (L2 Support)
ScienceSoft
August 2014 - January 2015
Managed WPEngine hosting infrastructure with focus on monitoring, troubleshooting, automation, and client consulting.
System monitoring, issue resolution, configuration management, and Linux automation scripting
Information Security Specialist
life:) Belarus (TurkCell)
January 2014 - August 2014
SIEM administration and security monitoring with focus on threat detection, incident response, and audit compliance (SOX, ITIL/COBIT).
Core Competencies
Offensive Security
Penetration Testing (Web, Mobile, Network, Infrastructure) Black-box | White-box | Grey-box Testing Social Engineering & Phishing Assessments Cloud Security (AWS) Vulnerability Assessment
Security Architecture
SIEM Implementation & Management IDS/IPS Deployment Security Infrastructure Design Compliance Framework Implementation Incident Response & Forensics
Compliance & Governance
ISO 27001 | PCI DSS | HIPAA SOC2 Type 1 & Type 2 GDPR | CCPA SOX | ITIL | COBIT HTP (High-Tech Park) Requirements
Leadership & Strategy
Team Building & Management Pre-Sales & Advisory Services Process Optimization KPI Development & Performance Management Business Development
Technology Stack
SIEM: RSA EnVision Tools: Nmap, Burp Suite, Metasploit, Arachnni, Acunetix Languages: Bash, Python, PHP, X++ Linux/Unix Administration AWS Cloud Security
Emerging Technologies
AI & Automation in Security Blockchain/Crypto Security DevSecOps Application Security Network Security
Certifications & Credentials
Certified Ethical Hacker (CEH)
• Information Technology Security Fundamentals
• Information Security Fundamentals
• MySQL Databases: Basics
• Mobile Device Security
• Acunetix Certified User
Publications & Thought Leadership
• Firewall Basic Bypassing Techniques With Nmap and Hping3
• Public Cloud Penetration Testing from the Customer Viewpoint
• Creating Quick Mass Scanning Tool with Python and ZMap
• Joomla on Nginx: Making SEF URLs
Languages
• Russian: Native or Bilingual
• English: Professional Working
• German: Elementary
Key Achievements
Scaled cybersecurity practice from 1 specialist to 12+ team members generating $1M+ annual revenue
Established repeating 60% client retention rate and high lead-to-project conversion metrics
Implemented comprehensive compliance frameworks (ISO 27001, PCI DSS, HIPAA, SOC2, GDPR) for 100+ enterprise clients
Developed AI-driven security automation reducing manual processes and improving response times
Achieved 48-hour average response time for client requests through process optimization
Built and led high-performing teams across penetration testing, compliance, and advisory services