IT Security Consultant

Uchádzač pracuje ako bezpečnostný analytik už takmer 5 a pol roka. V spoločnosti majú ľudí zodpovedných za monitorovanie technológií, napr. Splunk, takže keď sa objaví nejaké bezpečnostné upozornenie alebo je kritické, potom sa eskaluje k starším ľuďom, aby sa na to pozreli. V závislosti od kritickosti môžu do celého procesu zapojiť ďalšie tímy, manažérov a podobne, aby sa na to pozreli a zistili, aký veľký je dopad, a urobili nejakú analýzu celého incidentu. Okrem toho majú pre spoločnosť určité neustále zlepšovanie, aby identifikovali nedostatky, ako aj zefektívnili procesy, aby všetko prebiehalo hladšie, vyvinuli akési nástroje. Súčasťou jeho kompetencií je výmena znalostí, vedenie tímu, mentoring, organizovanie ďalších bezpečnostných činností a implementácia riešení pre výsledky v oblasti bezpečnosti. Vo svojich predchádzajúcich projektoch pracoval v agilnom prostredí s využitím metódy Scrum.

• Dostupnosť 2 mesiace

Senior Incident Response Analyst | Security Engineer (October 2019 - Current)

• Developed custom tools and automation solutions with Python to improve efficiency and performance.
• Identified process and visibility gaps, proposed and implemented improvements for increased coverage of potential attack vectors.
• Provided expertise and recommendations for shaping the Splunk environment globally.
• Leveraged Threat Intelligence to address security vulnerabilities.
• Responded to and remediated critical incidents, performed root cause analysis, and created IOCs for further investigation.
• Conducted threat hunting and proposed solutions for security gaps.
• Led the CSIRT EU team and mentored junior members.
• Initiated Purple Teaming activities and a project for deploying Cyber Deception measures.

Security Specialist | Incident Response (September 2018 - September 2019)

• Investigated and handled escalated incidents, identified root causes, and created post-incident reports.
• Extracted IOCs from incidents and leveraged Threat Intelligence for vulnerability analysis.
• Developed new security use cases to improve visibility.
• Conducted malware analysis and threat hunting.
• Provided advisory for system configuration and security improvement.
• Led a group of L1 analysts as their mentor and instructor.

Security Senior Operation Analyst | Splunk Engineer (December 2017 - August 2018)

• Administered client Splunk environments and ensured quality installations and configurations.
• Led and managed a remote team, assigning tasks and ensuring deadlines were met.
• Introduced new collaboration methods and version control tools for improved workflow.
• Standardized output quality and reduced time to reach goals.

Security Operations Analyst | Splunk Engineer (January 2017 - November 2017)

• Developed Splunk use cases and visualization dashboards.
• Researched and implemented collaboration tools for streamlined collaboration.
• Assisted with installation and configuration of Splunk instances in client networks.
• Ensured quality assurance of operation and development processes.

Education

• MSC in Digital Systems Security from the University of Piraeus, Greece.