A Leader in Cybersecurity Transformation
At the heart of WashU’s cybersecurity transformation is a dedicated team of professionals guided by the vision of strong leadership across WashU IT and supported by Chief Information Security Officer (CISO) Chris Shull. Among them is Alesya Bernatskaya, Program Director for the CyBear Secure Program, whose role as a facilitator has helped drive forward the university’s information security initiatives. Known for her kindness, knowledge and strength, Alesya was recognized by her peers as a Person of ImpacT. “None of these accomplishments are mine alone,” Bernatskaya says. “I’ve been fortunate to work alongside incredibly smart and passionate people throughout my career—people who truly care about the university’s mission. My role is to bring them together, help remove roadblocks and ensure we’re making meaningful progress.” Colleagues recognize her as a key figure in the success of the program, setting a high bar for excellence and continuously embodying the core values of ImpacT, the WashU IT Strategic Plan.
“Alesya has marshaled the resources and orchestrated the large and unruly crew of workers and stakeholders that have enabled the CyBear Secure program to drive forward and make enormous progress improving the University’s information security profile. She has done so with humility, fortitude, very helpful insights, and a great sense of humor,” said one colleague.
Another shared, “Alesya goes above and beyond in her role as a people manager and as a program manager. Alesya is always willing to help her direct reports and always has an open mind and leads with an understanding heart. I am proud to work for Alesya and be a part of the CyBear Secure program.”
Despite the praise, Bernatskaya remains humble. “Even though I am naturally confident, I’m always uncomfortable with public praise,” she admits. “But I’m glad my work is making an impact. This work is only possible because of the amazing team I work with and the support of leaders like Chris Shull, whose vision drives the CyBear Secure Program forward.”
A Journey of Growth, Fearless Challenges, and Unexpected Paths
Bernatskaya’s career at WashU spans nearly 19 years, but if you ask her, none of it was planned. As much as she is a planner, her career unfolded unexpectedly. She started college as an international business major, but when her friends were all programmers, she thought, “I know nothing about that… I’m going to do that.”
That fearless curiosity carried her forward. She joined WashU in 2006 as a programmer analyst, supporting the Student Financial Aid Office while finishing her last semester of college as a single mom. Overcoming initial imposter syndrome, she faced a major challenge early on: a mainframe migration that pushed her completely outside her comfort zone.
“I was terrified,” she recalls. “But failing wasn’t an option, so I had to keep up.”
That mindset shaped her career philosophy: always choosing the challenge that scares her the most. It led her to transition into project management and, ultimately, into information security—a field that was not even on her radar when she took on the CyBear Secure Program in 2021.
“What I enjoy is either building something new from scratch, like the CyBear Secure Program, or fixing something that doesn’t work,” she says. “That’s where I find the most fulfillment.”
Leading the Charge in Cybersecurity
Since its inception, the CyBear Secure Program has delivered remarkable results through the collective effort of WashU IT teams. Under Chris Shull’s leadership, and in partnership with Shared Infrastructure, Enterprise Systems & Services, End User Services and our Distributed IT partners, the program has successfully implemented over 60 projects related to solutions that protect and empower the university community.
Key CyBear Secure Program accomplishments include:
Automated Reset of Compromised Accounts – When an account is compromised, fast response is critical. A new automated process now quickly resets affected accounts, minimizing downtime for users and preventing further unauthorized access, ensuring a smoother and more secure recovery process.
Duo Enhancements (Verified Push & Passcode Removal) – To reduce the risk of unauthorized logins, verified push was introduced, ensuring users only approve legitimate login attempts. The removal of passcode authentication eliminates a method commonly exploited by attackers, improving security without adding complexity for users.
Strengthening Cybersecurity with Advanced Protections – Several key security enhancements have been implemented to better protect the university. Endpoint Detection and Response (EDR) and next-generation anti-malware defend against cyber threats, while vulnerability scanning and centralized log monitoring improve our ability to detect risks and respond proactively to potential security issues. These solutions work behind the scenes, providing essential protection without disrupting daily activities.
Defining True Impact
For Bernatskaya, being a Person of ImpacT is not about individual accomplishments—it is about collaborating to drive meaningful, lasting change. “True impact comes from asking, ‘How can I make things better?’ rather than stopping at ‘It’s not my job,’ ‘It’s not my problem,’ or ‘It’s outside my scope, so I don’t care.’” The people who truly make an impact are the ones who think beyond their immediate responsibilities. If the goal is simply to complete a project without considering what happens after, that is not impact—that is just checking a box.
Empowering Engagement Through Personal Accountability
As for fostering engagement and value at WashU IT, Bernatskaya believes that no amount of effort can make someone feel engaged if they do not find that motivation within themselves.
Providing tools, opportunities, and support can create a foundation for success, but meaningful change ultimately depends on an individual’s willingness to take ownership and move forward. True support should empower people to grow and take action, rather than serve as a substitute for personal effort.
“That implies that they are doing most of the work, and you’re just assisting. It does not mean that you are doing everything for them. And I think that’s sometimes what people confuse it for when they are asking for help. They’re looking for you to do everything for them.”
Looking to the Future
As Bernatskaya looks to the future, she acknowledges that cybersecurity is an ever-evolving challenge.
“The work doesn’t end,” she says. “For example, when we started in November of 2021, AI was not the thing. Now it’s the biggest thing. Who knows what will come next?”
Her legacy is one of transformation—not just in security initiatives, but in the culture of how WashU IT approaches complex challenges. And as for what is next? Bernatskaya will do what she always does: choose the path that scares her the most, knowing that is where the greatest growth and impact lie.