IT Security Consultant

The candidate is an experienced Cybersecurity consultant with more than 15 years of experience. All experience listed in his CV. Communication in English and Hungarian is at an excellent level.

Role #1 (Cyberdefence Consultant, December 2018 - Present)

• Building up sm-security monitoring based on SIEM.
• Administering Splunk Enterprise, installing forwarders, and working with searches and events.
• Ensuring compliance with PCI-DSS certification for cardholder data controls.
• Installing PCI-app for Splunk Enterprise and connecting log sources.
• Focusing on critical assets such as core and edge network devices, load balancers, and systems in DMZ.

Role #2 (Vulnerability Management Consultant, September 2015 - Present)

• Performing daily vulnerability management tasks using Tenable/Nessus scanners.
• Mainly focused on PCI scans and policy compliance scans.
• Keeping asset database up-to-date through network scans and providing reports to asset owners.
• Working with CIS and NIST audit files for compliance.
• Extending scans to uncover assets like networking devices and implementing policy compliance modules.

Role (Security-Senior Analyst, May 2018 - 2018)

• Sub-contractor for Novartis in the IT security vulnerability management department.
• Providing operational tasks in vulnerability management using Qualys Enterprise.
• Supporting CIS hardened "golden" images and using CIS-CAT for manual assessments.
• Extending scans to cover networking devices and implementing web access scanning modules.
• Collaborating with colleagues from RM and SOC for handling findings.

Role (Senior Information Security Advisor, October 2016 - 2017)

• L3 escalation point for SOC activities, handling offenses, rules, and investigations in IBM QRadar.
• Member of CSIRT and responsible for weekly reporting to infosec/ISOS in Belgian HQ.
• Creating security baselines documents for networking devices and performing CIS benchmarking.
• Ensuring network security compliance and policy adherence.