Security engineer working at the intersection of security operations and GRC. For the past four years I have built and owned an enterprise security program end to end — joining a B2B SaaS company as the founding member of its internal security team, taking over from an outsourced provider, and growing the program from zero to full international compliance maturity. These days I do security engineering for a banking AI platform.

My work spans both sides of the discipline: the governance side — three concurrent annual audits (ISO 27001, ISO 27701, SOC 2 Type 2) maintained with zero critical findings, a vendor risk program built from scratch, and a security policy framework kept honest against how systems actually run — and the technical side, from XDR-based detection and vulnerability management across AWS production infrastructure and corporate endpoints to role-based access control, zero-touch MDM provisioning for a global device fleet, and network security architecture for a new office build-out.

Before security I worked as a full-stack engineer and risk manager in fintech, building consumer products and AML/KYC compliance systems — a background that still pays off in application security reviews, code-level analysis, and the Python I write to automate security operations. Currently pursuing a Master's in Artificial Intelligence & Machine Learning, with research on retrieval-augmented generation and medical image segmentation for clinical diagnostics.

• Security operations — detection engineering with XDR, incident response, security monitoring across cloud and corporate environments.
• Governance, risk & compliance — ISO 27001, ISO 27701, SOC 2 Type 2; audit evidence ownership, risk assessment, policy development.
• Vulnerability management — continuous identification and remediation workflows for production infrastructure and endpoints.
• Identity & access management — RBAC design, provisioning workflows, access reviews, separation of duties.
• Infrastructure & network security — AWS and GCP hardening, network segmentation, VLANs, firewalls, DNS/DNSSEC.
• Security automation — Python tooling for access reviews, evidence collection, log analysis, and scan normalization.

Certified in CompTIA Security+ and Cisco CCNA.

• Contact email: contact@mikhailbahdashych.me
• LinkedIn: linkedin.com/in/mikhail-bahdashych
• Personal website: mikhailbahdashych.me