IT Security Consultant

Der Kandidat arbeitet seit fast fünfeinhalb Jahren als Sicherheitsanalytiker. In dem Unternehmen gibt es Mitarbeiter, die für die Überwachung von Technologien wie Splunk zuständig sind. Wenn es also eine Art Sicherheitswarnung gibt oder diese kritisch ist, wird sie an die Vorgesetzten weitergeleitet, damit sie sich die Sache ansehen. Je nach Kritikalität müssen sie eventuell andere Teams, Manager usw. in den gesamten Prozess einbeziehen, um zu sehen, wie groß die Auswirkungen sind, und um eine Analyse des gesamten Vorfalls vorzunehmen. Darüber hinaus gibt es einige kontinuierliche Verbesserungen für das Unternehmen, um Lücken zu identifizieren und die Prozesse zu straffen, damit alles reibungsloser abläuft, und eine Art von Tools zu entwickeln. Zu seinen Kompetenzen gehören der Wissensaustausch, die Leitung von Teams, Mentoring, die Organisation anderer Sicherheitsaktivitäten und die Umsetzung von Lösungen für Sicherheitsergebnisse. In seinen früheren Projekten hat er in einer agilen Umgebung mit Scrum gearbeitet.

• Dostupnosť 2 Monate Kündigungsfrist

Senior Incident Response Analyst | Security Engineer (October 2019 - Current)

• Developed custom tools and automation solutions with Python to improve efficiency and performance.
• Identified process and visibility gaps, proposed and implemented improvements for increased coverage of potential attack vectors.
• Provided expertise and recommendations for shaping the Splunk environment globally.
• Leveraged Threat Intelligence to address security vulnerabilities.
• Responded to and remediated critical incidents, performed root cause analysis, and created IOCs for further investigation.
• Conducted threat hunting and proposed solutions for security gaps.
• Led the CSIRT EU team and mentored junior members.
• Initiated Purple Teaming activities and a project for deploying Cyber Deception measures.

Security Specialist | Incident Response (September 2018 - September 2019)

• Investigated and handled escalated incidents, identified root causes, and created post-incident reports.
• Extracted IOCs from incidents and leveraged Threat Intelligence for vulnerability analysis.
• Developed new security use cases to improve visibility.
• Conducted malware analysis and threat hunting.
• Provided advisory for system configuration and security improvement.
• Led a group of L1 analysts as their mentor and instructor.

Security Senior Operation Analyst | Splunk Engineer (December 2017 - August 2018)

• Administered client Splunk environments and ensured quality installations and configurations.
• Led and managed a remote team, assigning tasks and ensuring deadlines were met.
• Introduced new collaboration methods and version control tools for improved workflow.
• Standardized output quality and reduced time to reach goals.

Security Operations Analyst | Splunk Engineer (January 2017 - November 2017)

• Developed Splunk use cases and visualization dashboards.
• Researched and implemented collaboration tools for streamlined collaboration.
• Assisted with installation and configuration of Splunk instances in client networks.
• Ensured quality assurance of operation and development processes.

Education

• MSC in Digital Systems Security from the University of Piraeus, Greece.