Aliaksei Brusiantsou.Security Architect

About / Aliaksei Brusiantsou

Security is
a team sport

I’m Aliaksei, a security architect with 15+ years in the space between enterprise risk and hands-on engineering.

I’ve worked across energy services, banking, government digital platforms and global IT services. The environments change; the work is always about helping people make good security decisions and carry them through.

That has meant designing Zero Trust for a large hybrid estate, building a vulnerability management programme, shaping a bank’s move to Azure, and leading a security R&D and deployment team of 24.

Explore the work

How I work

A few things
I come back to

Principles for the work.
And for the people doing it.

01

Start with the real risk

Understand the business and what it needs to protect. Make the trade-offs explicit before choosing the technology.

02

Make the secure path workable

A control needs to fit the way people deliver and operate a product. Design for the team that will live with the decision.

03

Build shared understanding

Good architecture gives engineers, leaders and auditors a common language. Explain the decision as carefully as the design.

04

Leave something that lasts

Create repeatable workflows, clear ownership and useful evidence. Help the team keep improving after the engagement.

Professional foundation

Always learning

  • CISSP
  • CCSP
  • CISA
  • CDPSE
  • TOGAF

Architecture, information security, cloud security, assurance and privacy.

Across environments

The same curiosity
across different contexts

Energy, banking and public services bring different constraints. I’m interested in the decisions beneath them: what matters to the organisation, how people work, and what makes a control useful in practice.

That is the thread connecting the case studies here and the notes in my notebook.

How this site is secured

Small footprint,
clear boundaries

Static pages, self-hosted fonts and no executable browser JavaScript. No analytics or tracking cookies. Cloudflare serves the site over HTTPS with a strict Content Security Policy, HSTS and framing protection.

Mozilla HTTP Observatory
A+ Verified 17 October 2026 · 12/12 checks

Deployments run through GitHub Actions, with Cloudflare credentials held in repository secrets. Security contact information is available for responsible reports.

Read the privacy notice for details about hosting and contact information.

Get in touch

Good security starts
with a conversation

Have a security challenge, an interesting role, or a different perspective?
I’d like to hear about it.

Elsewhere

LinkedIn