Architecture / Engineering / Assurance
I’m Aliaksei Brusiantsou, a hands-on security architect. I help mid-sized and large organisations turn risk priorities into working controls by designing, configuring and integrating security across cloud, infrastructure and software delivery.
Make the decision clear
Put it into practice
Show that it works
years in IT and Security
managed assets in a telecom security programme
endpoints in a hybrid security design, alongside 900 servers
people in the security R&D and deployment team I led
01 / Case studies
12 case studies across enterprise environments. Each explains the challenge, my contribution and the outcome.
Exposure management
Connecting exposure management, email protection and security monitoring across a complex telecom estate.
assets in the managed inventory
Cloud migration
Protecting client information while a private bank moved to Azure and Microsoft 365.
cloud, data and identity protection through the transition
Zero Trust
Connecting identity, protection and security operations across 7,000 endpoints and 900 servers.
endpoints and servers in the security architecture's scope
Vulnerability management
Connecting assessment, remediation ownership and security reporting across a hybrid energy-services environment.
scheduled refreshes of the production security dashboard
Secure software delivery
Embedding security checks, vulnerability management and clear ownership into government software delivery.
security capabilities activated
Security automation
Automating release tracking and vulnerability follow-up across three vendors using GitHub Actions and Jira.
of tracked vendor CVEs mapped to Jira within the reported scope
Audit readiness
Leading a 24-person security team to connect implementation, operational priorities and assurance requirements.
people in the security team
Enterprise architecture
Establishing asset ownership, operating processes and a prioritised roadmap across fragmented infrastructure.
assessed across infrastructure, security and operations
SIEM architecture
Establishing central security monitoring with repeatable deployment, detection guidance and a phased coverage plan.
from platform architecture to operational detection
Security services
Turning separate protection tools into coordinated security services with clear deployment, review and support responsibilities.
connecting security architecture, delivery and daily operations
Secure software delivery
Translating security policy into delivery activities, review criteria and accountable vulnerability management.
connecting security decisions from planning through maintenance
OT security
Designing removable-media controls and support procedures around the needs of offshore industrial maintenance.
for removable media used with industrial control systems
Cases use sector descriptions to protect client confidentiality.
02 / Skills & tools
Platforms and practices from architecture, implementation and integration work, alongside certifications and ongoing learning. The case studies show their application.
Design controls around business risk
AI-assisted work and deployment learning
Protect endpoints, networks and files
Control access and privileged exposure
Set risk priorities and assurance evidence
Assess exposure and prioritise remediation
Protect information across its lifecycle
Protect email and handle phishing reports
Connect monitoring to incident response
Turn events into actionable alerts
Support controlled industrial maintenance
Checks, gates and operational handover
Review code, APIs and dependencies
Automate recurring work and reporting
Plan backup and service recovery
Apply and maintain workplace controls
Know what you run and who owns it
Cloud, containers and virtual infrastructure
Integrate platforms and security workflows
Connect and segment business networks
Design data and storage dependencies
Plan API, integration and release testing
Map warehouse and business dependencies
Agent workflows and integration learning
Data platforms, governance and MLOps learning
03 / Practical notes
How I approach recurring questions in security architecture, operations and assurance.
All writing
Detection engineering
Enterprise architecture
Data protection
04 / Get in touch
For an assessment, architecture review or implementation programme, email me with the challenge, the environment and what needs to change. We can discuss the scope and where I can contribute.
Professional profile
LinkedIn