CYBERSECURITY SPECIALIST / ARCHITECT

Alex Hellberg

Experienced cybersecurity professional specializing in security architecture, penetration testing, and network security with leadership experience in information security teams.

[email protected]
@ahberg_work
linkedin.com/in/alex-hellberg
github.com/alexbergh
Kaliningrad, RU

About Me

Experienced cybersecurity professional specializing in security architecture, penetration testing, and network security with leadership experience in information security teams.

Core Security Expertise

  • Network Security & Segmentation
  • Penetration Testing
  • Vulnerability Assessment
  • Incident Response & Forensics
  • SIEM Solutions
  • Threat Modeling (STRIDE, PASTA)
  • Zero Trust Architecture

Cloud & Container Security

  • Docker Security & Hardening
  • Kubernetes Security (RBAC, PSP)
  • EKS/AKS Security Architecture
  • Container Image Scanning
  • Runtime Protection (Falco)
  • Supply-chain Security (SBOM)
  • Cloud Workload Protection

DevSecOps & Automation

  • CI/CD Security Integration
  • IaC Security (Terraform, Ansible)
  • Secrets Management (Vault, KMS)
  • Automated Compliance Pipelines
  • Python/Bash Scripting
  • Security as Code
  • GitOps Security Practices

Leadership & Compliance

  • Security Architecture Design
  • Team Leadership & Mentoring
  • Risk Management & Assessment
  • Security Policy Development
  • Regulatory Compliance
  • Security Audits
  • Security Awareness Training

Professional Experience

experience.sh
$ cat work_experience.txt
> RTK-IB LLC (rt-is.ru)
> Sep 2024 - Present | Security Architect
> Define and execute information security strategies for the development of Information Systems (IS), aligning cybersecurity requirements with business priorities
> Own target-state security architecture and resilience requirements; oversee implementation and alignment with cybersecurity requirements
> Lead cross-functional security and IT teams across architecture, implementation, operations, infrastructure, and development; oversee delivery timelines, quality, and key architectural decisions. Manage security budgets, estimate delivery effort and costs, and justify investments in security controls and services
> Support presales and customer engagements through infrastructure assessments, architectural proposals, and alignment of requirements and priorities
> Oversee compliance with applicable cybersecurity requirements and preparation for audits. Develop reusable security architectures, hardening standards, and requirements for logging, monitoring, and incident response
> Oversee infrastructure security, including network segmentation, perimeter protection, Kubernetes and Podman environments, and DevSecOps practices
> Developed a technical information security standard for AI systems

> X5 Group
> Jul 2024 - Sep 2024 | Chief Security Engineer (CSE)
> Leading the information security team and managing day-to-day operations
> Identifying and mitigating information security risks across the organization
> Conducting comprehensive security audits and vulnerability assessments
> Developing and implementing incident response protocols

> Inter RAO - Electric Power Plants, JSC
> Jun 2023 - Jun 2024 | Head of Information Security Group
> Managed a team of security specialists overseeing critical infrastructure
> Developed and enforced security policies compliant with industry regulations
> Conducted penetration tests and security assessments for power plants
> Coordinated response to security incidents and forensic investigations
$

Projects

Critical Infrastructure Protection

Designed and implemented security architecture for power plant SCADA systems to prevent cyber attacks on critical infrastructure.

SCADA IEC 62351 Network Security

Government Services Development

Led security architecture design for national digital government services platform, implementing zero-trust principles and secure citizen authentication framework.

Zero Trust eID PKI

Automated Audit Toolkit

Created custom penetration testing toolkit with automated vulnerability scanning and reporting capabilities.

Python Bash Metasploit

Security Hardening & Monitoring Platform

Advanced testing framework for security assessment and hardening procedures.

Python Testing Security

Contact

Get In Touch

I'm currently available for consulting engagements and interesting security projects. Feel free to reach out if you have any questions or would like to discuss potential collaboration.

Send Message