lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Security
Category: Security
Experience: 3 years | English: upper

Basic knowledge of Azure Cloud and AWS
Basic experience with configuration tools and infrastructure
management tools - (Terraform, Ansible)
Basic knowledge of Python scripting
Basic knowledge of Bash scripting
Basic knowledge of version control systems (Git)
Basic knowledge of Docker containers
Basic understanding of Agile development methodologies e.g.,
continuous integration, code analysis, etc.
Working experience with Jira and Confluence
Deploying and administering (WAF/DAM, Email Security products,
Autopsy,Xplico,LOKI,Rustscan,InfectionMonkey,MISP,OpenSCAP,Cuckoo
sandbox etc.)
*nix systems administering
Conducting light penetration testing
Configuring Cisco hardware/virtual appliances
Strong knowledge of networking and web concepts
English B2
Betta Security (Jul 2020 - Jun 2022)
 - Managing projects
 - Managing support cases and their resolutions
 - Handling communication between different teams
 - Сonducting technical and marketing presentations
 - Deployment and Technical support of various cyber security solutions
(Imperva WAF/DAM, Qualys Cloud Platform, TrendMicro Email Security)
 - Handling security incidents
 - Managing support cases and their resolutions
 - Deployment and Technical support of various cyber security solutions
(WAF, DAM, Vulnerability Management Platform, Email Security)
 - Handling security incidents

Parimatch.tech (Jul 2022 - Present)
 - Handling security incidents(Cloud, On-Premise, Web, etc.)
 - Playbook development
 - Conducting security controls and policy compliance controls
 - Writing a few scripts on Bash/Python to automate information
security processes
Position: Security
Category: Security
Experience: 0 years | English: upper

Cloud Security (1 year experience), Linux Essentials (2 years of experience), Programming Essentials in Python (1 year experience), PC Hardware and Software (4 years of experience), Routing and Switching (4 years of experience), Scaling Networks (4 years of experience)
Experience with Windows, Mac and Linux operating systems.
Ability to quickly identify and eliminate malfunctions.
Experience with office applications Microsoft Office, LibreOffice.

Cisco certificates: Cybersecurity Essentials, CCNA R&S: Scaling Networks, CCNA R&S: Routing and Switching Essentials, CCNA R&S: Introduction to Networks, IT Essentials: PC Hardware and Software, Partner: PCAP - Programming Essentials in Python, Partner: NDG Linux Essentials, Partner: Cloud Security
Position: Security
Category: Security
Experience: 0 years | English: intermediate

"I have completed the CCNAv7: Introduction to Networks course from CISCO, where I studied the fundamentals of computer networks. I am also currently taking the Junior Cybersecurity Analyst course."
Hardworking and enthusiastic Student working towards a B.S. in Cybersecurity .I have a strong interest in learning and developing in the field of cybersecurity. I strive to constantly expand my knowledge and skills and actively seek opportunities for further education.
Bilingual, hardworking, and ready to join my next team.
Position: Security
Category: Security
Experience: 0.5 years | English: upper

Finishing 1 year cyber security course, honours diploma in AzInTelecom internship, Splunk certified core user
I have done an internship in summer related to cyber security. During this period i have gained experience in Penetration testing, SIEM, GRC and most importantly how to write reports. Besides that, it made me to understand how companies work and what information security worker really does in a daily basis.
Right now, i am working as a SOC analyst in Cyberpoint where i am analyzing logs and checking for any malicious activities. Also, i am writing rules for systems in order to detect malicious activities. In my free time, i enhance my skills in computer architecture and red teaming.
My expectation is to bypass my limits and gain huge amount of experience. I enjoy being challenged and engaging with projects that require me to work outside my comfort and knowledge set. As i continue to learn new languages and development techniques, that are important for me and for the success of an organization.
Position: Security
Category: Security
Experience: 0 years | English: intermediate

I have completed the following courses: CISCO Introduction to Packet Tracer, Network Essentials, Introduction to Cybersecurity, and SET Academy Cybersecurity Course
I have no work experience, but I am interested in developing my skills in the field of cybersecurity. I am willing to undergo intensive training and am currently studying Cybersecurity at Vadym Hetman Kyiv National Economic University
Position: Security
Category: Security
Experience: 2.5 years | English: upper


Penetration testing:
Open-source intelligence (OSINT), Vulnerability scanning and exploitation, manual verification, API testing, network infrastructure penetration testing
Burp Suite, Postman, nmap,  metasploit, sqlmap, testssl, nikto, wireshark, dnsrecon, dnsmap, subbrute, amass, censys, shodan, OpenVas, theHarvester
Stress testing - slowloris testing, locust framework, slow query
OWASP Web Security Testing Guide, OWASP Application Security Verification Standard, and OWASP CheatSheet and best practices

Cloud and DevOps: 
Cloud - Google cloud - PubSub, BigQuery, AWS services, Azure - Active Directory, Defender, CloudAppSecurity, Sentinel
DevOps - docker, docker compose, swarm, kubernetes (k8s), google shell, ELK stack - elastic, logstash, kibana, graylog
Server - Nginx, apache, modsecurity
Git, bitbucket, Gitlab 
Scripting in Python, Powershell, Bash, C++

Audit:
Conducting audits in accordance with ISACA audit checklists, CIS benchmarks, software and hardware best practicies, analysis of provided documents, communications, interviews with the customer. 

Documentation:
Drawing up and structuring documentation, config plan, processes
Writing instructions and guides both for internal use and for users in Confluence.  
Statues report, final report writing.
Some experience with ISO27001 and other frameworks  

Mobile testing: 
iOS and Android testing
OWASP Mobile Security Testing Guide
Unpacking, disassembling, intercepting traffic, re-signing the application, api testing
Position: Security
Category: Security
Experience: 4 years | English: fluent


-Perform web application, network penetration tests 
-Developing and managing penetration testing exercises product 
-Implementing automatization processes, maintaining delivery platform and creating CI/CD pipelines for the exercises
-Monitor server event logs, performance logs, growth of data on the network, setup hardening and automating server backups
Position: Security
Category: Security
Experience: 11 years | English: fluent

Successfully completed risk assessments for multiple crown jewel assets, as well as, many projects of critical importance for the business. As part of risk assessments: identified risks, recommended mitigations and provided risk acceptance analysis for business stakeholders. Designed and improved Vulnerability Management Program for big enterprise.
Senior Security Consultant - risk assessment, vulnerability management, threat modeling
Network Security Architect - network security architecture 
Network Solution Architect - network solutions architecture
Senior Systems Analyst - network, system and application administration
Not interested in: operational support, incident response, penetration testing. 
Looking for: security and risk management, vulnerability management, security architecture.
Position: Security
Category: Security
Experience: 5 years | English: upper


Skilled Cyber Security Specialist with over 3 years of experience in Cybersecurity and SOC technologies.
Proficient in online security research, planning, execution, and maintenance. With passion and curiosity, I've providing network monitoring, security software installation, and working to prevent cyberattacks, especially in business and corporate settings. 


Technical Skills: SIEM (Qradar, Splunk, Logrhythm, Darktrace)
EDR (McAfee,Trellix,CrowdStrike,Cybereason)
Security on Cloud (AWS/Azure)
Antivirus (McAfee/Trellix ENS, Sophos, Microsoft Defender)
Firewall (Cisco, Fortigate, Palo Alto)
Security frameworks(NIST,ISO 27001,HIPAA,MITRE)
Linux, Windows (security/administration), Burpsuite, Wireshark, Rapid7 scanner
Java, C#.Net, Python, Bash, Ansible
SQL,Postgres
GIT, JIRA


Certifications: Certified Ethical Hacker(CEH v11.), Splunk Core Certified Power user, AWS Foundational
Position: Security
Category: Security
Experience: 1 years | English: upper

i am self-educated, learned most of my data from every point that have a value to give me fresh and exciting information.
SOC Analyst Intern Prosol CJSC | 09/2021 - 12/2021
SOC Operations, Threat Hunting, Developing and implementing an open source SOC platform, SIEM and TI from
scratch(using ELK stack, Wazuh, The Hive, Cortex, MISP, and other small integrations like Virustotal, AbuseIPDB, etc).
Functional sandbox enviroment(Cuckoo sandbox and needed core components like suricata, Volatility, YARA, etc)
integrating with existing TI and SIEM platform.

        Cyber Security Specialist ADIF | 01/2022 - 05/2022
I My main job was implementing a compact SOC system(Security Onion) for the newly opened Security Department of
the company. Monitoring and analysing of all system components(SOC). Pentesting of infrastructure(Production and
Development enviroment, In-house components, Network, etc).

         Independent Contractor - Bug Bounty Hunter
Recently joined to the community and mainly focused on Web Application based Vulnerabilities.
I want to be in a improvemental and friendly atmosphere to use benefits fully and help each other with most capacity.
Position: Security administrator
Category: Security
Experience: 1 years | English: intermediate


SUMMARY
1 year of experience in information security system.
Experience in creating and supporting documentation, analyzing vulnerability reports.
Conducting infrastructure security audits.
Security systems administration.

TECHNICAL SKILLS
Vulnerability assessment
Malware analysis
Administration of Linux and Windows operating systems.
Administration of Vulnerability Scanner(InsightVM),Antivirus software(Symantec Enpoint Protection),PAM(One Identity),IPS(CISCO FP,Checkpoint),WAF(Azure WAF) and Microsoft Intune.
Basic knowledge of C++/Python/Bash/Powershell.
Administration of System Center Configuration Manager .

Creating policies and configuring the security system.
Understanding of the OSI model.

CERTIFICATION
MS-500: Microsoft 365 Security Administration
MS-101: Microsoft 365 Mobility and Security

LANGUAGES
English - Intermediate
Russian,Ukraine - Native

EDUCATION
National Technical University of Ukraine“Igor Sikorsky Kyiv Polytechnic Institute”
Computer engineering


WORK EXPERIANCE
Specialist in threat analysis and information risk assessment 
March 2020-November 2020

Security system administrator
January 2021 - now
Position: Security analysis
Category: Security
Experience: 3 years | English: basic


Information Security Specialist
"XalqBank" OSJS


-Configure and write security policy for Email Security /Web Security /Advanced Malware Protection /
Thread Response /Traffic monitoring/ 2FA and etc .
-Analyzes and assesses vulnerabilities in the infrastructure (software, hardware, networks), investigates
available tools and countermeasures to remedy the detected vulnerabilities, and recommends
solutions and best practices.
-Performs security monitoring, security and data/logs analysis, and forensic analysis, to detect security
incidents.
-Auditing and monitoring IT systems.
Position: Security analyst
Category: Security
Experience: 1.5 years | English: intermediate

Курси
        Cisco Networking Essentials
·	Cisco CCNA CyberOps
·	Splunk Fundamentals
·	AWS  Essentials
·	Cisco CCNA Network Security
·	Linux Essentials
·	Python Essentials
·	Cisco Cybersecurity Essentials
·	Immersive Labs (Linux, Windows)
·	Fortify Presale certificate 
·	Veracode technical certificate (lvl 1,2)
•	Developed a project for the Microsoft Bounty program
•       Analyzing of network packets
•	Classifying the various types of attacks
•	Using network monitoring tools: Wireshark, Burp Suite, nmap, npcap
•	Elasticsearch intermediate skills (Dashboards creation, watchers, create Grok patterns)
•	Log parsing and classifying
•	Python basic knowledge
•	Experience of working with network devices (Cisco: routers, switches and hubs)
•	Skills in threat hunting and vulnerability research
•	Knowledge of cybersecurity frameworks: Kill Chain and Mitre ATT&CK
•	Knowledge of Linux bash scripts and Windows Powershell 
•	Understanding of CIA-triad, Balanced Security, OSI model, networking and TCP/IP stack
•	Understanding of ISO2700x, PCI DSS, GDPR, HIPAA, NIST

INTERNSHIP | UNDERDEFENSE | 01.07.2020 – 01.01.2021
·	Security Operations Center
·	Risk assessment of the threats and their impact on the business
·	VCISO
DEVOPS ANALYST | CYBEROO | 01.07.2021 – 05.11.2021
·	Log parsing, classifying and analysis
·	Pipelines development
·	Elasticsearch configurations using Python (Grok patterns)

INFORMATION SECURITY ENGINEER | IntraSystems | 24.09.2022 - at present
·	Microfocus Fortify ,Veracode
·	SAST/DAST technology 
·	Implementation of the system Fortify 
·	Integration product (GitLab CI/CD , Jira,LDAP(S) )
Position: Security analyst
Category: Security
Experience: 4 years | English: fluent


I am currently the team lead of the information security department at Dancom technologies, Dangote Industries Limited.
Some of the skills and projects I have performed include: 
•	Created security policy governance documents for the company. Examples of these policies include Remote access policy, Network security policy, security awareness training documents and other SOP documents for tasks carried out by the team.
•	Managed Security Information and Event Management system
•	Managed Endpoint security tool
•	Ensured all existing policies and procedures are duly updated
•	Unified Threat Management using FortiGate UTM
•	Performed forensic investigations
•	Managed data loss prevention (DLP) solution to protect sensitive information and end user productivity.
•	Managed privileged accounts using a Privileged Access Management solution 
•	Managed Security Awareness Training Project
•	Managed Data privacy requirements ensuring compliance with external regulations
•	Performed Vulnerability Assessment on critical systems
•	Performed Risk Management on critical system
Key accomplishments 
1-	Deployed and Managed Microsoft Azure Sentinel Security Information and Event Management (SIEM) system to improve SOC operations. This included developing and improving Security Orchestration Automation and Response capability using playbooks to drive faster incident response and integration with Microsoft Defender.
2-	Deployed Privileged Access Management (PAM) solution to manage privileged accounts and identity and access management within the business
3-	Performed Vulnerability Assessment and Risk Management on critical business systems across Nigeria and PAN Africa.
4-	Created, Planned, and Managed Annual Groupwide Security Awareness Training Project.
5-	Managed Data privacy requirements ensuring compliance with external regulations such as NDPR, GDPR and ISO27001
6-	Managed data loss prevention (DLP) solution to protect sensitive information and ensure end user productivity
7-	Managed third party vendor security assessment.

Amongst all these, I'm working to improve my skills in API Security using the APISEC University.
Position: Security analyst
Category: Security
Experience: 6 years | English: intermediate


— set up up and support of the corporate DLP solution;
— support and provide of correct reporting from clients and servers;
— development of DLP policies, response rules and allowed/blocked lists based on business requirements;
— development of information security policies and procedures;
— determining of the possibility of improving the policy to reduce false positives;
— verification of existing controls and data leakage prevention policies;
— search for vulnerabilities and violations of requirements of information security documentation;
— setting up triggers and reviewing daily security reports generated security monitoring tools
— data analysis and investigation of information security incidents;
— support and regular review of information security standards and instructions;
— testing of web resources and systems;
— development and management of the incident management process and the vulnerability management process;
— scanning of applications, web applications, sites, servers, workstations, analysis of scan results and work with it.
Position: Security analyst
Category: QA
Experience: 2 years | English: upper

According to statistics, since my start in last company the biggest quantity of critical/blockers bugs in previous project was found by me [3 QA in team].
I also created simple tutorials for difficult things in 'Confluence' for all team using.
Testing the trading platform mobile apps.

Requirements analysis, specification review
Writing and maintaining test docs
Creation tutorials for QA, Dev. teams
Etc.

Jira, Firebase, Confluence, API Tester, Xray, Android Studio, SQL, DevTools
I'm looking for a position what can give to me an opportunity to be more than just a tester, opportunity to improve the product.
Position: Security Analyst
Category: Security
Experience: 0.5 years | English: intermediate

Skills
Programming languages: Python, MySql, HTML, CSS
Foreign languages: English – Intermediate
Knowledge of OSI and TCP/IP model
Understanding of basic network protocols.
Administration of Microsoft Windows, Linux
Working experience with: Wireshark, WebScarab, Burp Suite, Nmap, Postman
03.2021 – 02.2023
Technical specialist, Project Manager
Tasks performed:
Communication with clients.
Planning and control of the work process.
Creating and maintaining communication between departments.
Solving conflict situations.
Automation implementation.
Introduction of reporting.
Conducting weekly and monthly presentations.




03.2023 – 07.2023
Information Security Intern
Tasks performed:
Conducting a scan of hosts using Nessus (Before scanning, coordination with owners and responsible for hosts)
Monitoring and prevention of leakage of critical information using DLP (Forcepoint) system
Request processing in bpm
Position: Security Analyst
Category: Security
Experience: 3 years | English: upper

Cisco CyberSecurity courses 
Practice in ISSP
Learned c # and python to create tools for working and automating processes
Big amount of cyber security courses, lectures
3+ years in British product company. Working on software packaging using MSI/MST technologies, App-V, Powershell,  AutoIT, etc. 
Control corporate clients with LANdesk (Ivanti), SCCM
Researching for newest vulnerabilities and creating c# code for a vulnerability scanner
A lot of interesting and differrent work. Salary review regularly.
Medical insurance (optional)
Position: Security Analyst
Category: Security
Experience: 0 years | English: fluent


CyberSecurity Analyst
(2020-Present) self-education
MySQL basic knowledge
Linux/bash scripting basic skills
Completed online courses about IT and cybersecurity:
IBM CyberSecurity analyst at coursera.org
CompTia Sec+ (Exam Prep) at pluralsight.com
Linux commands by Internet of Things Academy at udemy.com
Bash scripting by IoT Academy at udemy.com
Google IT Support (Present)

Cryptocurrency Analyst
self-employment
Investing/trading cryptocurrencies
Projects researchment/assesment
NFT projects researchment, chatting, etc.
Want to develop my skills in IT Sphere and later get a job on a better position in cybersecurity.
Position: Security Analyst
Category: Security
Experience: 3 years | English: upper


I have 3+ on each skills, I have work with sailpoint, cyberark MFA, Oauth, SSO, 2FA, , I provides a good framework and identity defined security Strategy and great outcome, also provided a good effective automation driven for vital information security and ensure a proactive practice
Position: Security Analyst
Category: Security
Experience: 3 years | English: upper


I have been involved in cybersecurity for 5 years with 3 years of industry experience as a SOC Analyst. SIEM - is my best friend.

I am proficient in Linux and Windows environments (including Active Directory). My expertise extends to network and host forensics, intrusion detection, and anomaly monitoring.

Beyond my hands-on experience, I’ve shared my knowledge through cybersecurity training specifically for Ukraine’s Critical Infrastructure sectors.

To enhance my skills, I consistently participate in CTF competitions.
Position: Security Analyst
Category: Security
Experience: 1.5 years | English: intermediate


I have experience in organizing the work of bug bounty companies on the HackenProof platform. I collaborated with and independently checked the security status of the platform's clients, as well as validated reports from the white hat hacker community.

He set up and optimized workflows for individual teams, and took an active part in the configuration and development of the platform's functionality.
I would like to focus my career more on development and application development (I'm interested in the IOS/MacOS/IPadOS platform).
Position: Security Analyst
Category: Security
Experience: 0 years | English: pre

Graduated from Google Cybersecurity course.
I have no work experience, but I really want to get my first work experience, so I try to constantly improve my skills. 
At the moment I have only experience of passing an internship in an IT company and some laboratory projects completed as part of a training course.
Position: Security Analyst
Category: Security
Experience: 3 years | English: intermediate

Successfully identified and exposed several malefactors involved in the trade of confidential information (government and one of ukrainian bank).
Currently in the process of obtaining EC-Council CEH certificate and the second master`s degree at the Odessa National University of Internal Affairs
Bugbounty program participant of PrivatBank.
Speech at a conference with own project on the exploitation of vulnerabilities in mobile forensics of iOS-devices
Incident response, red team, OSINT, deanonymization bad actors on DarkWeb, corporate security and employee verification, etc.
Worked out and adjusted processes, focus on a certain type of tasks and direction.
Position: Security Analyst/Engineer
Category: Security
Experience: 2.5 years | English: upper

Below is a list of qualifications and certifications I have earned:
CompTIA Security Analytics Professional – CSAP - in 2022
Comptia Cyber Security Analyst (CySA+  CS0 - 002) - in 2022
Comptia Security + (SY0 - 601) - in 2020
MTA: Security Fundamentals - in 2020
I am proficient in vulnerability and risk assessment. I have a great deal of experience  with working on defensive and offensive security tools, performing security operations. 
I am ready to take a position where my behavioral and technical skills can be put to work.
Position: Security Analyst/Engineer
Category: Security
Experience: 2 years | English: upper


Information Security Engineer
Monitoring of information security alerts, events, and
incidents. Ongoing vulnerability scanning with remediation.
Process of security requests and reports from end-user.
Performing security awareness sessions for employees.
Improving the processes and technologies for monitoring
and analyzing security events from different log sources.
Writing technical documentation.

Security Analyst
Performing day-to-day monitoring using various SIEMs and
security tools. Preparing customer reports. Making security
health checks on the customer environment.
I am looking for a job in SOC or similar offers