lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Security engineer
Category: Security
Experience: 11 years | English: intermediate

C|EH -Certified Ethical Hacker 05/2022-05/2025
IBM Cybersecurity Analyst
Summer Student at CERN 2011
• Reviewing the penetration test report and performing a recursive check on the resolution;
•	Conduct proactive monitoring, investigation, and mitigation of security incidents;
•	Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information;
•	Search firewall, email, web or DNS logs to identify and mitigate intrusion attempts;
•	Analyze Vulnerability Assessment Tool's daily/weekly/monthly scan reports, provide other functional teams with mitigation guidelines and review applied fixes;
•	Investigate malicious phishing emails, domains and IPs using Open Source tools and recommend proper blocking based on analysis;
•	Analyze security event data from the network (XDR, SIEM);
•	Perform malware analysis on isolated virtual servers;
•	Analyze alerts and events from Digital Risk Protection Platform including attack surface management, digital risk protection and cyber threat intelligence;
•	Perform procedure tasks related to department during employee onboarding/offboarding process.
•	Participate in Information Security Policies creation;
•	Write new standard, aggregation and correlation rules for SIEM;
•	Mitigation of malware detected by EDR on endpoints through EDR Administration Center;
•	Perform day-to-day operational support of IT networking Environments;
•	Coordinate with developers, engineering and other staff members on issues related to existing system enhancements;
Position: Security Engineer
Category: Security
Experience: 0 years | English: intermediate

Jira, Confluence; 
− MSSQL, MySQL; 
− Zabbix Monitoring; 
− Python, C++, Java; 
− Kali Linux, Burp Suite, Maltego, Metasploit Framework, Nmap; 
− Understand the ISMS and SDLC concepts; 
− Network protocols: HTTPS, DNS, RDP, SFTP, SNMP, SSH, LDAP, TLS; 
− Understand the Legislative and normative legal acts of Ukraine, which regulate the issues of information security and information protection. International laws, standards and best practices governing information security and series protection: ISO, NIST. 
Network protocols. OSI model levels. Access control models
2021– now HelpDesk L1 Support Engineer in Astound Commerce My responsibilities: 
− Consulting and providing information necessary for diagnosing and localizing problems that occur in existing e-commerce systems and components; 
− Consultation and provision of information necessary for monitoring and modernization of qualitative characteristics of existing algorithms and procedures (performance) used in e-commerce systems and components; 
− Providing information and training to users on the effective use of e-commerce and other systems in order to optimize the processes of both internal and external customers of the Customer; 
− Providing information and advice on the implementation of e-commerce products with guaranteed levels of security, including confidentiality of data storage, making payments online, minimizing the vulnerabilities of IT solutions and more. 
2019 Junior Programmer in Vector Sirius My responsibilities: 
− Develop a proprietary software for trade using 1C technology; 
− Consult and support clients via telephone and TeamViewer
Position: Security Engineer
Category: Security
Experience: 2 years | English: intermediate


Application Security
In my current role as an Application Security Engineer, I am tasked with the responsibility of maintaining the security integrity of our mobile and web applications. My responsibilities involve conducting regular security audits, penetration testing, and code reviews to detect and rectify vulnerabilities. I work closely with the development team to integrate security measures into the development lifecycle, fostering a culture of 'Security by Design'.

I play a crucial role in incident response and remediation, ensuring potential breaches are managed effectively and lessons are learned. I am also involved in enhancing security awareness within the organization, providing training and workshops to different teams to uplift our overall security posture.

Development
As a PHP Backend Developer, I was responsible for server-side web application logic. I developed and maintained the backend components, connected the application with the other web services, and supported the frontend developers by integrating their work with the application.

I wrote clean, fast PHP to a high standard, in a timely and scalable manner, developed and deployed new features to facilitate related procedures and tools if necessary. I solved complex performance problems and architectural challenges, and also collaborated with front-end developers and other team members to establish objectives and design more functional, cohesive codes to enhance the user experience.

This experience gave me an excellent understanding of the full web development process, including design, development, and deployment, which has proved to be very valuable in my current Application Security Engineer role. My strong background in PHP development and understanding of secure coding practices have uniquely positioned me to bridge the gap between development and security in my current role.
Position: Security Engineer
Category: Security
Experience: 5 years | English: upper

Creating cloud security event-driven checker for Google Cloud infrastructure.
Building access management process from scratch.
Application Security: Performing Security Risk Assessment, Threat Modeling
Tool set: STRIDE, OWASP SAMM, Microsoft TMT, C4, draw.io, Jira, Confluence

Cloud Security: Securing cloud infrastructure using CIS security controls. Automating security checks via cloud functions.
Tool set: Google Cloud Platform, CIS benchmarks, Cloud Custodian

Software Development: Creating event-driven cloud security assessment tool which automates CIS checks for GCP environment and implements automatic reporting and remediation. Developing web add-on for the popular Cloud Custodian open source security tool. Adding support for new vendors to the customer's product (network management) via middle-ware 
Tool set: Python, Flask, MySQL, MongoDB, unittest, SonarQube, gitlabCI, git, perforce, Linux rpm, networking

Access Management:  Access Management process implementation. Creating high-level architecture, access control matrices, documentation, templates, workflow.
Vulnerability Management: Carrying out security reviews on web-applications. Managing vulnerability scanners, filtering reports, prioritizing vulnerabilities. WAF implementation.

Network Engineering: Performing Routing, Switching (Cisco/Extreme), unified communications (Cisco Call Manager, Contact Center). Performing network architecture reviews, creating designs.
Network Security: Configuring firewalls (Palo Alto)
Remote mode only. Based in Almaty, Kazakhstan.
Position: Security Engineer
Category: Security
Experience: 5 years | English: fluent


April 2022 -
Present
Application Security Engineer, Meta, London.
{ Part of Meta’s Product Security team. Working with engineers for developing secure
applications / new features.
{ Conducting security code reviews and writing detailed reports on my findings. Working
with stakeholders for addressing vulnerabilities.
{ Writing code to improve the internal security-related tools: automatic vulnerabilities
detection, fuzzing native code, static code analysis.
July 2020 -
April 2022
Application Security Engineer, eMAG, Bucharest.
{ Enforcing the security of the eMAG’s public domains and internal apps by performing weekly security reviews. Working with engineering teams for developing secure
applications.
{ Developed a fake order detection system that automatically traces down malicious orders.
More than 1000 orders were classified this way without the previous manual work.
{ Assessing the security of eMAG’s Android app. Because of this, the API endpoints are
20% more secure.
{ Working with automated scanners such as: RIPS, Nessus, Acunetix, Qualys.
June 2021 -
September
2021
Application Security Engineer, Facebook, London, Internship.
{ Part of Facebook’s Product Security team. Working with engineers for developing secure
applications / new features.
{ Writing code to improve the internal security-related tools: automatic vulnerabilities
detection, fuzzing native code, static code analysis.
March 2019 -
July 2020
Security Engineer, Bitdefender, Bucharest.
{ Responsible for enforcing the security of internal and external assets by conducting
periodical pentesting operations. I was able to find 2 critical internal vulnerabilities that
had an impact on all employees.
{ I managed the vulnerabilities reported via the Bitdefender bug-bounty program. Because
of my work, the average validation time was lowered to 3 days from 4 days.
{ I monitored the network traffic within the company by setting up alerts in Splunk on the
logs provided by Palo Alto and other internal tools. Because of this, 1 C&C traffic was
spotted and the communicating laptop proved to be infected with malware.

2017 - 2019
Software Engineer, Bitdefender, Bucharest.
Position: Security Engineer
Category: Security
Experience: 3 years | English: fluent

As a security engineer, I have accomplished various achievements that have helped to enhance the security of our organization. One of my key achievements is detecting phishing and malware attacks and preventing them from spreading. By implementing advanced threat detection and response mechanisms, I was able to quickly identify and isolate malicious activities, thus preventing any potential damage to our systems.

Another accomplishment is creating scripts for automating processes. With automation, we were able to streamline various security processes, including vulnerability scanning, patching, and incident response. This not only saved time and resources but also improved our overall security posture.

In addition to this, I also launched security awareness programs and phishing campaigns to educate our employees about various security threats and how to mitigate them. This helped to build a strong security culture within the organization, making our employees more vigilant and proactive in identifying and reporting security incidents.

Lastly, I successfully onboarded newcomers in a short time. By developing a comprehensive training program and providing them with the necessary resources and tools, I was able to quickly get them up to speed on our security policies and procedures. This helped to ensure that our new hires were fully equipped to handle any security-related issues that may arise.
As a security engineer with extensive experience in the field, I am skilled in using a variety of tools to protect organizations against cyber threats. My expertise includes Carbon Black EDR, Logrhythm, and Splunk SIEM, as well as Jira and Confluence for collaboration and project management. I am also experienced in working with vulnerability scanners such as Qualys and Tenable, as well as Palo Alto Panorama and AnyRun sandbox.

In addition to my technical skills, I have a background in programming and am proficient in Python. This allows me to automate security processes and develop custom solutions to address unique security challenges.

I am passionate about security and am committed to staying up-to-date on the latest threats and technologies. I have experience in conducting and analyzing phishing campaigns and developing reports that provide insight into an organization's security posture.

At the core of my work is a focus on collaboration and communication. I believe that effective security requires a team effort and work closely with cross-functional teams to integrate security into all aspects of an organization. This approach has led to successful security implementations and a culture of security awareness and responsibility.

If you're looking for a dedicated security engineer with a broad range of technical skills and a commitment to collaboration, please don't hesitate to get in touch. I look forward to discussing how I can help protect your organization.
Position: Security Engineer
Category: Security
Experience: 2.5 years | English: upper


As a SOC Engineer my main role in team was monitoring of security alerts to identify security incidents and potential threats, incident response and report creation. Alerts belonged to such fields as: web attacks, endpoint protection, network security, critical changes in systems. Some incidents were manually reported: possible phishing, insider threat, suspicious host activity. I also participated in security controls improvement and IR documentation creation. Moreover, part of my responsibilities was regular security scan checks, control of vulnerability mitgation, compliance management, secutiry avareness trainings and software security checks before implementation. Work in a fast-paced company learned me to be flexible and constantly evolve my skills.
Position: Security Engineer
Category: Security
Experience: 4 years | English: fluent


A Security Engineer with proven years of experience in the Enterprise, Service Provider, and Financial services space. Versed in the understanding and deployment of Core and Access MPLS / IP networks Suite, Endpoint and Enterprise Network Security, AWS technologies, Cyber Intelligence for Operation Security, Vulnerability Management and Risk Assessment, Zero-Trust Network model (Identity-centric access control), and Software-Defined Perimeter. I possess adequate knowledge of Web Application Security, CIS Controls, Frameworks, Web Proxies, bash & basic python scripting. I am a blue teamer who is passionate about building and enhancing secure on-premise and cloud infrastructure to enable existing and future business processes.
Position: Security Engineer
Category: Security
Experience: 5 years | English: intermediate


- At position of Security engineer for the last year my main responsibilities were conducting Thread Model sessions with developers, conducting network pentest, and building a security culture into the company. Also I did Designing and building a secure access network across multiple locations.
- As a Network Security Engineer I'd worked for 2 years in total before that. Engaged in the implementation, configuration NGFWs, EDR\XDR, Site-to-Site and clients VPN tunnels.
- The same way I have 4 years of experience as a System engineer. Design, implement, maintaining of the entire hybrid/on-prem IT infrastructure 
- I have been teaching at the University for 8 years now.\\
Position: Security Engineer
Category: Lead
Experience: 5 years | English: upper


Chief Technology Officer and Co-Founder
Simplerity.com
Jan 2018 – Present (2 yrs 8 mos)
Simplerity is an Endpoint Security Platform. Detection of new unknown attacks on endpoints that cannot be detected by standard protection tools (antivirus algorithms, firewalls, etc.), using machine learning and user behaviour analysis.

• Create detection, prevention, and response for cyber-attack, and handle threats from advanced adversaries.
• Design, implement and manage the Endpoint Security Platform to detect new unknown attacks on endpoints.
• Develop and design Security Orchestration and Automation (SOAR) Playbooks.
• Designed an automated system built on a weighted scoring system to reduce false positives.
• Built threat actor playbooks using Caldera, Atomic Red Team, Uber Metta, and in-house built payloads.
• Built visibility and detection coverage using MITRE ATT&CK to fill gaps.



WebCase
Feb 2007 – Oct 2013 (6 yrs 9 mos)
WebCase is a company specializing in the development of web services and startups
• Designed and implemented anti-fraud platform, that decreased chargeback ratio to 0.2%
• Designed, implemented and integrated High Load & High Availability services for file and video processing.
• Designed and built a CDN platform for fast and fault-tolerance video delivery.
• Implemented model that predict content popularity.
Position: Security Engineer
Category: Security
Experience: 9 years | English: upper

Successful  ISO 27k and SOC II compliances;
DevSecOps process for Secure software lifecycle development
Technical implementation of security best practices and standards
• Cloud infrastructure managing and support: IAM roles, AWS;
• Experience of setup and support Kubernetes and Docker;
• Hardware Cisco UCS and VMware virtualization configuration and support;
• Usage of ansible paybooks, Jenkins pipelines, GH and Terraform for automation tasks;
• Network Security (Next Generation Firewall, ACL, Port Security, TACACS, Radius, VPN IPSEC tunnel, Site to
Site, DMVPN, ACS, ISE, 802.1x, IPS);
• Routing & Switching Security;
• Oracle Linux, CentOS, Ubub=ntu
• F5 BigIP LTM and GTM (VIP, proxy, WAF);
• K8s Nginx WAF
• IPS/IDS, SSL inspection implementation; 
• Monitoring system;
• Security scanning and penetration testing for WEB services and  infrastructure;
Expect IT Security Engineer, DevSecOps or DevOps position with security responsibilities.
Position: Security Engineer
Category: Security
Experience: 7 years | English: upper


Coordinates the continuous development, implementation and updating of security and privacy policies, standards, guidelines
. Developing security awareness program for employees.
.Took part into Privacy-related projects / initiative (e.g., Privacy / GDPR Compliance Program related initiatives, Privacy Audits).
.Implementation and support Microsoft Intune for mobile device management.
.Implementation and support vulnerability scanning into application development lifecycle (SAST / DAST / SCA)
.Hardening existing Cloud infrastructure (AWS,Azure)
.Continuous scanning, prioritization, and reporting of vulnerabilities throughout on-premise and cloud-based environments across both enterprise and service provider networks
•Implementation and ongoing maintenance of vulnerability scanning solutions, including security agents deployed on endpoints across the enterprise.
•Collaborate with IT groups on monthly patching, non-patch vulnerability remediation, vulnerability exception review
•Perform formal penetration tests, pinpoint methods that attackers could use to exploit weaknesses.
•Collection of intelligence using open-source intelligence (OSINT), social media intelligence (SOCINT).
•Deliver technical reports and formal papers on test findings. 
•Hunt for and identify threat actors by analyzing and researching the techniques, tools, and processes used by threat actors
Developing and enhancing DLP controls to prevent unauthorized transmission of sensitive and proprietary data.
•Developing security awareness program for employees, train existing and new employees.
•Performing dynamic and static malware analysis, to understand and mitigate threats across all organization including networks and workstations.
•Supporting and monitoring security tools like IDS / IPS systems, firewalls, ELK stack, sysmon, ossec, etc.
•Threat hunting , malware analysis activities across the organization.
•Threat intelligence activities to discover threat actors which can harm organization and customers.
•Digital forensic activities including memory , logs and network analyses.
Position: Security Engineer
Category: Security
Experience: 1.5 years | English: intermediate


Currently, I am a Master's student at Shevchenko University in Kyiv.
My major knowledges are computer management and security management. I have basic knowledge of Unix systems, System management, Network management, Programming (C#, C++,Java, Python), and Testing (QA). I have knowledge of various CVE, CVSS, Exploits, and ISOstandards and CIS Benchmarks.
Position: Security Engineer
Category: Security
Experience: 2 years | English: upper

Bachelor's degree in Cybersecurity.
Practical DevSecOps CCSE certified.
Currently working as a SOC Engineer

Experience:
SIEM (ELK stack)
SOAR (administration, playbooks implementation)
Working with firewalls (both L4 and L7)
IPS/IDS alerts investigations
Next-gen EDR (investigations)
PCI DSS alerts/incidents investigations
AWS infrastructure security audit (GuardDuty, SecurityHub, IAM, etc)
Automating of security tools usage via CI/CD (GitLab)
Automation of security and administration processes (Python)
Incident management & response
Vulnerability management
Working with developers/DevOps teams to fix security issues

Also worked as a infrastructure monitoring team engineer -> leam lead. Experience:
24/7 infrastructure monitoring (Zabbix)
Monitoring automation (Python)
Organization of internal team's processes
Employee education
- Network security
- Work in shifts
Position: Security Engineer
Category: Security
Experience: 10 years | English: upper

Successful incidents investigations
Deep knowledge  in wide range of technologies - helping IT in solving not only security issues, but also their own configuration mistakes
Open source passionate - making an effort even if company's budget is limited
Cyber-security incident management and response (SIEM: QRadar, cyber forensic: FTK, IRP: TheHive)
Vulnerability Assessment (Nexpose, Nessus, Acunetix, DefectDojo)
Penetration tests (Metasploit, Burp Suite, Sqlmap etc)
Log Management (Graylog, syslog-ng)
Monitoring (Zabbix, Grafana, ClusterControl)
AV Gateway: proxy and email (McAfee WG, Cisco IronPort)
NGFW/IPS (Cisco Firepower, Check Point)
EDR (Wazuh as HIPS, GRR, Osquery)
Remote Access (Check Point, MFA PrivacyIDEA, OpenVPN, One Identity Safeguard)
DLP (Forcepoint)
PKI (OpenXPKI)
GRC (Eramba)
AD security (ADAudit Plus)
Installing and configuring security systems
Designing and implementing of technical and administrative standards, security baselines
Writing technical documentation and recommendations
Virtual infrastructure support, backup and recovery (VMware vSphere, Veeam)
Security Awareness for the company’s employees
Strong team
HQ staff is really interested in their security (not only due to regulator requirements)
Personal and professional growth opportunities
Position: Security Engineer
Category: Security
Experience: 4 years | English: upper


Establishing the corporate information security program. Audit policies and infrastructure in network equipment. Designing and implementing network security (including segmentation and design network, VPN, authentication, and authorization) based on best practices of NIST, ISO 27033, and NSA. Implementing elements of Zero Trust Network Access.
•  Configuring & distributed firewall policies and NAT rules 
•  Configuring & distributed security profiles such as IPS/IDS, Antivirus, WEB filters, and SSL inspections.
•  Projecting SD-WAN.
•  Building secure data channels (Site-2-Site\Dial-Up IPSEC)
•  Remote Access VPN (AAA, SSL, IPSEC)