Cybersecurity Analyst & Cybersecurity Specialist

Zkušený bezpečnostní inženýr a analytik s odbornými znalostmi v oblasti Azure Sentinel, Defender XDR a cloudové architektury. Znalost jazyků KQL, Python a Bash, silné zázemí v nástrojích pro zabezpečení sítě, jako jsou Wireshark a TCPDump. Prokazatelné výsledky při zlepšování přesnosti detekce hrozeb a snižování počtu falešně pozitivních výsledků. Znalost několika jazyků. Silné mentorské a školící schopnosti se zaměřením na zlepšení reakce na incidenty a bezpečnostního postoje.

Security Engineer & Analyst 03/2024 - Current • Developed and optimized detection rules for Microsoft Defender XDR and Azure Sentinel using KQL, improving threat detection accuracy and reducing false positives by 60%. • Led high-priority incident response, investigating escalated alerts and reducing overall response time by 29%. • Conducted continuous security analysis and monitoring to proactively identify and mitigate emerging threats. • Created automation scripts to streamline content management and mentored Level 1 analysts to enhance incident response capabilities. • Improved overall security posture and threat detection capabilities.

Security Analyst 09/2023 - 03/2024 • Monitored system logs using Lima Charlie for Endpoint Detection & Response, identifying and mitigating potential threats. • Conducted security assessments, identified vulnerabilities, and implemented proactive mitigation strategies. • Managed and configured firewalls and intrusion detection systems to maintain a secure environment. • Decreased phishing incidents by 20% through targeted training and improved email filtering protocols. • Improved network security by 10% through effective firewall and IDS configuration.

Software Developer, Intern 07/2023 - 09/2023 • Developed and maintained Telegram bots using Python, Git, and SQL to enhance customer service. • Provided technical support to over 60 users, demonstrating strong problem-solving skills. • Created an intuitive front-end interface for a web application using CSS, HTML, and JavaScript. • Increased response time by 80% through the implementation of Telegram bots. • Gained experience in web development and customer service.

Cybersecurity Analyst Lab 9/2024 • Installed and configured Defender XDR for traffic analysis on the victim machine to enhance endpoint detection. • Configured Sliver for the offensive state on the Ubuntu machine and initiated a c2 payload. • Explored Empire’s post-exploitation capabilities to simulate real-world attack scenarios. • Engaged in hands-on cybersecurity exercises to enhance practical skills. • Developed a deeper understanding of cyber attack scenarios and defense strategies.