IT Security Consultant

The candidate is currently a penetration tester who has been in this position for over 1 year in a commercial practice. Prior to that she worked for 3 years as a security analyst, but would not like to return to that as she enjoys the offense side more. She worked at a SOC centre, they were all operators and they would come into contact with incidents, very early on, find out if it was true, false, bug etc, when they couldn't resolve it themselves they would send it to the analysts who would assess the correctness of the solutions, then either resolve it themselves or resolve it with the technical team. Currently doing both defense and offense, vulnerability scans and the like. He does penetration testing for the customer, api testing, and does reports and surface testing during the week to find as many issues as possible in the shortest amount of time. She would like something like a junior pen. tester or medior where she has someone she can consult with. Communication in English - written is not a problem, communication so B2.

IT Security Consultant September 2021 - Present (8 months)

• penetration pentesting (web, API, infrastructure), vulnerability scanning, reporting

Security operator January 2021 - September 2021 (8 months)

• reaction on triggered events in SIEM throught different customers, proactive creation of recommendation for customers (regarding new/announced vulnerabilities)

Security analyst January 2021 - September 2021 (8 months)

• L2 data analysis from security operators (L1), resolution of problems from L1, purple teaming, incident response, SIEM and EDR analysis, content creation in EDR, SIEM, log analysis, log management

Security analyst August 2018 - January 2021 (2 years)

• L2 data analysis from security operators (L1), resolution of problems from L1, purple teaming, incident response, SIEM and EDR analysis, content creation in EDR, SIEM, log analysis, log management

Security operator Apríl 2017 - January 2021 (3 years)

• reaction on triggered events in SIEM throught different customers, proactive creation of recommendation for customers (regarding new/announced vulnerabilities)

System engineer April 2016 - August 2018 (2 years)

• modification of configuration in different applications (syslog-ng, centreon, scripts, ...), updating operational systems/applications, configuration of new servers

Tester Apríl 2016 - November 2016 (8 months)

• application testing of HomeCredit on user layer, scenario creation, data revisioning in database