Aleksandr Zheleznov
Security Service Manager & SOC Team Lead. I build and run security operations for Microsoft-centric environments.
About
I lead security operations for organizations that cannot afford to guess. My work covers detection engineering, incident response and cloud security across multi-tenant Microsoft environments (Sentinel, Defender, Entra ID, Azure). I prefer simple security: clear processes and native tooling used well.
I am completing an MSc in Computer Science (Security) at the University of Bern, with a focus on applied cryptography, privacy and usable security. I work in English, Russian, French (intermediate) and German (beginner).
Experience
Security Service Manager & SOC Team Lead, CrucialLogics
- Lead the SOC-as-a-Service offering and the SOC team, owning detection strategy, client onboarding and SLA governance.
- Cut mean time to respond from ~5 hours to ~1 hour and the false-positive rate from ~99% to ~80%, while sustaining 100% SLA attainment.
- Oversee ~300 incidents per week; built ~50 custom analytics rules and tune ~6 every month.
- Map detection coverage to MITRE ATT&CK and report posture to client leadership.
Cloud Security Analyst Consultant, CrucialLogics
- Defended multiple client Microsoft tenants with Defender and Sentinel.
- Built custom analytics rules and response playbooks; 99% SLA satisfaction.
IT & Security Consultant, Orbital Installation Technologies
- Hardened SMS flows against toll fraud, deployed SPF, DKIM and DMARC, and fixed a broken access-control misconfiguration.
- Built ~50 automated workflows saving ~40 hours per week; migrated field forms to self-hosted Form.io on AWS.
Research & writing
Binary classification for perceived quality of headlines and links on worldwide news websites, 2018-2024
Twelve classification algorithms evaluated on 115 linguistic features across about 57.5 billion news items. The best model, a fine-tuned DistilBERT, reached 90.3% accuracy.
Microsoft Intune: Centralized Endpoint and Privilege Management
Five principles for governing endpoints and privileges centrally.
Security research projects
- Phishing-resistant authentication: FIDO2/WebAuthn and OpenPGP deployment trade-offs.
- Offline CBDC payments: privacy-preserving designs and secure-element trust assumptions.
- Confidential computing: a self-hosted stack on Intel TDX with remote attestation.
- Privacy Poker: a browser game that teaches informed consent and data minimisation.
Skills
Certifications
Contact
Open to security operations, cloud security, GRC and cyber risk roles, including in finance. Email aleksandr.zheleznov03@gmail.com or message me on LinkedIn.
Percentages marked with ~ are estimates.