Simon Kirillov
Research And Development Engineer at Wallarm. API & App Security Integrated
Bratislava, Region of Bratislava, Slovakia
Summary
🤩
Rockstar🎓
Top SchoolSimon Kirillov is a research and development engineer based in Bratislava with six years of hands-on experience in API and application security. At Wallarm he builds API Abuse Prevention capabilities, detecting and mitigating credential stuffing, fake account creation, scraping and other automated attacks, and contributes to the GoTestWAF open-source tool for simulating OWASP/API attacks across REST, GraphQL, gRPC and more. His background includes adapting cryptographic protocols (WireGuard with GOST) and performing security audits for blockchain projects, blending applied cryptography with pragmatic engineering. He has a strong Golang focus demonstrated by significant contributions to making GoTestWAF more robust and Windows-compatible and by fixing a critical JSUnicode encoder vulnerability. Active in security research communities (former CTF team member), Simon pairs data-driven bot detection research with production-ready implementations. His profile combines research rigor from Tomsk State University with practical delivery of defensive tooling and offensive testing expertise.
6 years of coding experience
1 year of employment as a software developer
Specialist, Computer Security, Specialist, Computer Security at Tomsk State University
Russian, English
Github Skills (6)
windows10
web-application-firewall10
api-security10
go10
waf10
testing9
Programming languages (5)
Github contributions (5)
wallarm/gotestwaf
Feb 2021 - Jan 2023
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:7 releases, 23 reviews, 304 commits in 1 year 11 months
Contributions summary:Simon made significant contributions to enhance the project's functionality and security. They added Windows support by modifying the command-line interface, the test loading mechanism, and the HTTP client. They also addressed a critical vulnerability by fixing the JSUnicode encoder and the configuration. The commits demonstrate a focus on API security tools and WAF detection logic, aligning with the repository's goals.
golangweb-application-securityapisecurity-toolsgrpc-security
svkirillov/cryptopals-go
Jan 2021 - Oct 2021
Cryptopals challenges solutions for Set 8
Contributions:5 reviews, 7 PRs, 70 pushes in 9 months
golangcryptographycryptopalsbaduk
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.