Ilia Snezhkov

Company-wide Application Security Platform

The technology arm of MTS, one of Russia’s largest telecom groups — public cloud, data, AI and developer platforms for enterprise customers and for the group’s own engineering organisation.

An internal DevSecOps platform that collects security data wherever code and workloads live — scanners in GitLab CI, image scanning in Kubernetes clusters, cloud inventory — and drives everything downstream from it: CI quality gates, auto-fix merge requests, and the security team’s own back-office and analytics.

• Own the platform end to end: architecture, backend, data model, automated remediation, and both the security-team and developer-facing surfaces.
• Built for scale: thousands of repositories across dozens of engineering teams and clusters, tens of thousands of container images and releases analysed, and a dependency inventory of hundreds of thousands of components.
• Built CVE prioritisation over a knowledge base of published vulnerabilities enriched with exploitation signals (CISA KEV, public exploits, EPSS), so triage starts from what is actually being exploited rather than from raw scanner volume.
• Built CVE-exposure analysis: when a new vulnerability is disclosed, affected projects surface automatically and reach the security team as tracked work, without waiting on input from product teams.
• Integrated multiple classes of scanning (SCA/SBOM, SAST, secrets, IaC) into CI, combining open-source tools with in-house extensions and custom scanners.
• Introduced LLMs as an automated second opinion on scanner findings — cutting false positives and a large share of the team’s manual triage load.
• Lead the technical side: architecture and implementation decisions are mine to make, within a direction agreed with engineering leadership.

Python · FastAPI · PostgreSQL · Kubernetes · Docker · GitLab CI/CD · Semgrep · Trivy · Syft · gitleaks · TypeScript

Bank-wide Application Security Platform

Russian subsidiary of Raiffeisen Bank International — retail and corporate banking in a heavily regulated environment.

Led the build of the platform from scratch: security scanning, triage and reporting embedded across the SDLC of a large, predominantly Java organisation under strict audit and compliance requirements.

• Security checks were built to fit the delivery flows teams already had, rather than requiring them to standardise their pipelines first.
• Built and maintained the platform’s async Python microservices and contributed to its React/TypeScript frontend.
• Automated finding triage and reporting so results reached owning teams as actionable work rather than raw scanner output.
• Owned CI/CD and observability end to end — Kubernetes, GitLab pipelines, Grafana dashboards, error tracing.

Python · FastAPI · Litestar · asyncpg · PostgreSQL · Kubernetes · GitLab CI/CD · React · Grafana

Last-mile delivery provider carrying merchants’ online orders through to delivery.

Backend microservices and shared internal libraries used across the company’s engineering teams.

• Developed FastAPI microservices and reusable internal libraries adopted by other backend teams.
• Led refactoring and performance optimisation of existing services.

Python · FastAPI · PostgreSQL · Docker

Mobile App & Website Backend API

Backend for the McDonald’s Russia mobile app and website, built under contract via ADV — around 15 million users, one of the country’s highest-traffic consumer products.

A high-load API for the mobile app and the website — gRPC microservices behind a service mesh, event sourcing for state changes, and product features through to the payment integration. Peaks near 10,000 requests a second were absorbed by optimisation rather than by more hardware.

• Shipped product features end to end, including the payment integration.
• Optimised the services carrying the peak so the load was met on the existing cluster rather than by scaling the infrastructure.
• Introduced a service mesh and event sourcing into the platform architecture, improving service-to-service reliability and auditability of state changes.
• Built gRPC microservices and an internal integration-test framework used across the platform.

Python · gRPC · PostgreSQL · Redis · RabbitMQ · Docker · Kubernetes

Crypto-loans platform — a security-sensitive financial product allowing users to borrow against cryptocurrency collateral.

An API gateway fronting the platform’s services, plus a real-time collector aggregating cryptocurrency quotes from multiple exchanges to price collateral.

• Built both services: the gateway unifying access to the backend, and the quotes collector feeding near real-time pricing into collateral valuation.
• Maintained the core Django services of the platform.

Python · FastAPI · Celery · Django · PostgreSQL · Redis

Contract backend engineering for international clients, delivered independently end to end. Included a flight-ticket meta-search service with distributed parsing and real-time result streaming, and a SaaS that prioritised test runs by predicting which commits were likely to introduce defects.

Python · Flask · socket.io · Celery · PyTorch · scikit-learn · PostgreSQL

Suji

Japanese learning platform for iPadOS, iOS and macOS. Native Swift 6 under strict concurrency across 40+ modules; offline-first local SQLite syncing to Supabase through an outbox queue. FSRS-5 spaced repetition, handwriting graded against KanjiVG with dynamic time warping, on-device and cloud AI, and a full teacher-and-student loop.

Swift 6 · SwiftUI · GRDB/SQLite · Supabase · PencilKit · Metal

Gokaku

Offline trainer for Japan’s written driving-licence exams, iOS and Android. 774 true/false questions, each carrying a verbatim quote from the National Police Agency rulebook and machine-verified against that corpus; 208 official sign images; twelve languages; no account, no network, no data collected.

Flutter · Dart · Kotlin/Android · Python

Specialist Degree — 5-year programme, equivalent to Master’s level — Information & Computer Systems Security

Teaching assistant, 2016–2018. Competitive CTF player — exploitation, reverse engineering.