IT Security Consultant

Kandidát je zkušený konzultant v oblasti kybernetické bezpečnosti s více než 15 lety praxe. Všechny zkušenosti jsou uvedeny v jeho životopise. Komunikace v angličtině a maďarštině je na vynikající úrovni.

Role #1 (Cyberdefence Consultant, December 2018 - Present)

• Building up sm-security monitoring based on SIEM.
• Administering Splunk Enterprise, installing forwarders, and working with searches and events.
• Ensuring compliance with PCI-DSS certification for cardholder data controls.
• Installing PCI-app for Splunk Enterprise and connecting log sources.
• Focusing on critical assets such as core and edge network devices, load balancers, and systems in DMZ.

Role #2 (Vulnerability Management Consultant, September 2015 - Present)

• Performing daily vulnerability management tasks using Tenable/Nessus scanners.
• Mainly focused on PCI scans and policy compliance scans.
• Keeping asset database up-to-date through network scans and providing reports to asset owners.
• Working with CIS and NIST audit files for compliance.
• Extending scans to uncover assets like networking devices and implementing policy compliance modules.

Role (Security-Senior Analyst, May 2018 - 2018)

• Sub-contractor for Novartis in the IT security vulnerability management department.
• Providing operational tasks in vulnerability management using Qualys Enterprise.
• Supporting CIS hardened "golden" images and using CIS-CAT for manual assessments.
• Extending scans to cover networking devices and implementing web access scanning modules.
• Collaborating with colleagues from RM and SOC for handling findings.

Role (Senior Information Security Advisor, October 2016 - 2017)

• L3 escalation point for SOC activities, handling offenses, rules, and investigations in IBM QRadar.
• Member of CSIRT and responsible for weekly reporting to infosec/ISOS in Belgian HQ.
• Creating security baselines documents for networking devices and performing CIS benchmarking.
• Ensuring network security compliance and policy adherence.