Yuriy Serdyuk

Lead Security Researcher with 15+ years of experience in cybersecurity, specializing in automotive security, embedded systems, hardware security, reverse engineering, and vulnerability research. Discovered multiple critical vulnerabilities in connected vehicles and industrial control systems, including remote code execution, local privilege escalation, and cryptographic signature verification bypasses. Author of five CVEs affecting Volkswagen ID. vehicles and industrial PLC platforms.

Experienced technical leader with a strong background in building security research teams, developing cybersecurity laboratories, leading R&D projects, and presenting original research at international security conferences including Black Hat Europe and Hack In The Box.

Team Lead, Mobile Development - R&D - Abu Dhabi, UAE

(2025-02)

• Lead a team of four software engineers.
• Define software architecture, technical strategy, and engineering processes.
• Manage delivery, code reviews, and development priorities.

Lead Cyber Security Researcher - NavInfo Europe B.V. - Eindhoven, Netherlands

(2019-03 - 2025-01)

• Founded and led the Automotive Cyber Security Research Team.
• Built an automotive cybersecurity laboratory and managed security research projects.
• Conducted on-site software and hardware security assessments of automotive systems from Volkswagen, BMW, Volvo, Polestar, and Aston Martin, including proof-of-concept demonstrations of identified vulnerabilities.
• Performed penetration testing and reverse engineering of electric vehicle ECUs, including firmware analysis and vulnerability assessment.
• Conducted hardware security assessments of next-generation infotainment systems.
• Led RF key-fob security assessments, including proprietary protocol analysis.
• Developed RF analysis tools and GNU Radio-based demodulators.
• Designed and led development of an ECU firmware analysis scanner.
• Developed fuzzing frameworks for CAN bus UDS and Bluetooth HCI protocol security testing.

Senior Research Developer - Kaspersky Lab - Moscow, Russia

(2018-02 - 2019-03)

• Conducted vulnerability research on industrial control systems and SCADA platforms.
• Reverse engineered PLC protocols and industrial automation software.
• Developed Wireshark dissectors for CODESYS V3, Beckhoff, Ethernet/IP CIP, Omron FINS, and Freelance protocols.
• Developed a Siemens S7-300/S7-400 bytecode decompiler.

Malware Researcher - Dr.Web Ltd. - Saint Petersburg, Russia

(2010-12 - 2018-02)

• Reverse engineered advanced malware, banking trojans, and cyber espionage tools.
• Investigated botnet infrastructures and command-and-control protocols.
• Developed malware monitoring and analysis frameworks.

Master of Science - Physics - Tyumen State University (2004 - 2009)