IEVGEN BONDARENKO
PRODUCT SECURITY RESEARCHER | INDUSTRIAL & CRITICAL INFRASTRUCTURE | AI SYSTEMS
PROFILE
Product security researcher focused on industrial and critical-infrastructure software, AI infrastructure, robotics, IoT, firmware, and open source. Work spans source and binary analysis, trust-boundary testing, reproducible validation, coordinated disclosure, and remediation engineering.
Public credits include four industrial CVEs across Moxa AIG-302 and Lantronix G520 in two CISA ICS advisories, plus CVE/GHSA findings in MLflow, Eclipse Ankaios, vLLM, and LMDeploy.
SELECTED SECURITY RESEARCH
Moxa AIG-302 & Lantronix G520 - 4 CVEs / 2 CISA ICS advisories
Reported CVE-2026-109812, CVE-2026-109813, CVE-2026-84409, and CVE-2026-91191. CISA ICSA-26-293-03 and ICSA-26-272-01 publicly credit Ievgen Bondarenko; both vendors published fixed releases.
References: ICSA-26-293-03 | ICSA-26-272-01
MLflow — CVE-2026-64849 / GHSA-7gwp-5pfp-969j
Credited finder of unauthenticated full-read SSRF in webhook delivery. The MLflow advisory rates it CVSS 3.1 8.6 High; the CVE record lists 9.3 Critical. Fixed in 3.15.0.
Eclipse Ankaios — CVE-2026-84173 / GHSA-rp6v-x3q5-cp2g
Reporter of an authorization flaw allowing scoped workloads to access or modify cluster state outside their intended subtree. Validated the maintainer fix and fixed release.
vLLM / LMDeploy
Reporter for CVE-2026-73560 and CVE-2026-46517: a model-specific multimodal SSRF/local-file boundary bypass and an unsafe remote-code default when an operator loads a selected model repository.
Open-Source Security Engineering
20+ merged security and hardening changes across gVisor, Kubernetes, vLLM, Microsoft Sentinel, Swift Package Manager, OSV-Scanner, Tink, and Google Bumble.
EXPERIENCE
Independent Security Researcher
California, Remote|2026–Present
Source and binary analysis across industrial and critical-infrastructure software, AI infrastructure, robotics, IoT, firmware, and open source. Reproduce impact, determine root cause, coordinate disclosure, review patches, and retest remediation.
Security & Compliance Consultant
California, Remote|2025–Present
Security and compliance assessments across cloud, identity, endpoint, application, and infrastructure environments. Work includes SOC 2, ISO 27001, HIPAA, NIST-aligned controls, technical remediation, and audit readiness.
Computer Security Manager
Technohome Inc. | Roseville, CA|2022–2025
Managed Windows/Linux security, hardening, patching, access reviews, network segmentation, pfSense controls, event investigation, and incident-response procedures.
Earlier Career: Business Ownership & Operations Leadership
Founded and operated a U.S. logistics business coordinating several dozen trucks and approximately 50 outsourced personnel.
CORE CAPABILITIES
- Vulnerability Research
- secure code review, source-to-sink tracing, reverse engineering, firmware/protocol analysis, threat modeling, SAST/DAST/SCA, PoC validation, fuzzing, CWE/CVSS, coordinated disclosure, remediation verification
- Product & Infrastructure Security
- AI model serving, distributed systems, robotics, IoT, embedded and industrial systems, Kubernetes, containers, authorization, SSRF, TLS/certificate validation, parsers, protocols, supply-chain trust
- Detection & Security Engineering
- Microsoft Sentinel, Defender XDR, KQL, Sigma, MITRE ATT&CK, Security Onion, Suricata, Zeek, Wazuh, Detection-as-Code
- Tools
- Python, Go, C++ analysis, Bash, PowerShell, Linux, Docker, GitHub Actions, Semgrep, Joern, CodeQL
CERTIFICATIONS & EDUCATION
- CompTIA Security+ ce
- Microsoft Certified: Security Operations Analyst Associate (SC-200)
- Sierra College, IT & Cybersecurity, 2025–Present
- National Metallurgical Academy of Ukraine, B.S. Engineering