lang-uk/recruitment-dataset-candidate-profiles-english huggingface dataset:
Position: Information Security Engineer / Penetration tester
Category: Security
Experience: 7 years | English: fluent


Have 6 years of experience working at SOC in the government sector as SOC Engineer-Analyst. Last year as SOC reporting and analysis division chief. Have hands-on skills in the implementation of cybersecurity, incident response, network traffic analysis, malware forensics, penetration testing. Participant of international cyber exercises providing by NATO. Experienced in programming languages such as Java, C#, Python, JavaScript, Bash, Power Shell.

Experience:
-	Support, maintain and operate security infrastructure and technologies used by SOC and make recommendations to enhance threat detection;
-	Hardening Linux and Windows endpoints;
-	Firewall, AV, DLP centralized monitoring and  management;
-	Creating custom C#, Java executable files to perform various tasks at Windows endpoints;
-	Automatization daily routine tasks via Bash/Power Shell;
-	Performing vulnerability testing by automated tools (network assets Nexpose, web assets - Nikto);
-	Creating custom software for interaction with security devices via their API;
-	Perform acquisition static/behavioral analysis of malware to determine the effects on host and network;
-	Manage incident cases from inception to closure;
-	Provide detailed analysis reports;
-	Regular network enumeration and vulnerability scans planning.

Education: 
-	Military institute of telecommunications and informatization, master’s degree;
-	Cybersecurity and Information Assurance, 6-month course.

Courses: 
-	CCNA: Networking; 
-	OSCP.
Position: Information Security Engineer | SOC Analyst
Category: Security
Experience: 2 years | English: intermediate

Top 4 CTF team in Ukraine according to ctftime.org (2021)
DCUA member since 2022.
SIEM monitoring(ELK, Cloudflare)
Vulnerability assessment using automated tools like Acunetix, Nessus, Qualys, and manual(Burp, Nmap, etc.)
Support of vulnerability management process - writing reports and assisting developers.
Access management and administration of internal infrastructure, AWS&GCP IAM, Jira, Gsuite, GitLab, etc.
Security research before implementation(Google SSO integration).
In my new position, I'd like to prioritize SOC analysis and Vulnerability management processes (Research, development, scanning, and manual security testing) more than access management.
Position: Information security engineer/SOC L2 analyst
Category: Security
Experience: 5 years | English: intermediate


Tasks and accomplishments:
- Incident response and investigation
- Security software testing
- Monitoring and alerting rules development
- Information security and event management
- Vulnerability management;
- Threat Response;
- Asset management;
- Network traffic analysis;
- Penetration testing;
- OSINT
- Security awareness

Tools: Wazuh, ELK stack, Nessus, Palo Alto ngfw, Cortex XDR, Splunk SIEM, Netwrix, Kali Linux, Kubernetes, TheHive SOAR, Cisco EDR
Position: Information Security Expert
Category: Security
Experience: 11 years | English: upper

I have practical experience in IT, Information Security, Financial Management, User experience - I have understanding of business needs and obstacles between IT & Business & Security
I have experience in all stages of the ISMS (ISO 27001) lifecycle - building, auditing, and certifying. Also, I worked as an internal IT auditor and have practice in system administration.
So I can create an ISMS from scratch, that includes business process analysis, security process establishment, document writing, creation of the Risk management system, internal audit arrangement, compliance, and reporting handling. And can provide user awareness, as I provide education seminars too.
As a SOC manager, I can organize incident response teamwork, framework, and process. 
In addition, I can audit and consult on BCP and DRP, and know SDLC, PCI DSS, and other IT-related standards and their practical use.
If you need a security framework for your product -  I can analyze legislation requirements (e.g. HIPAA, ISO 13485, etc.) and create it to provide real value to the customer.
And yes, can manage the team.
The best is contract base work on long-term projects. In general, any form is acceptable.
Don't like government bureaucracy and banking boredom but can help to fix :)
Position: Information Security/ IT Governance / IT Audit
Category: Security
Experience: 3 years | English: fluent


Maintenance and development of ISO27001 Information Security Management Program
Maintenance and development of ISO27701 Privacy Information Security Management Program
Conducting Third-Party risk assessments
Ensure Vendors are in compliance with organization’s security requirements.
Assessing IT control elements to mitigate IT risks regarding the confidentiality, integrity, and the availability of business information
Reviewing the systems of IT general controls, risk and compliance with policies and regulations
Audit methodology and established risk assessment framework
Establish and maintain close working with clients across the IT organization and work closely with those clients evaluate the security implications of any proposed changes to the bank’s infrastructure.
Assessing clients' IT environments and IT-related business processes that support the financial statements to determine the extent to which reliance can be placed on the internal control environment
Professional working environment, continious imporevement, good team, innovative solutions.
Position: information security, it security manager, CISO
Category: Security
Experience: 11 years | English: intermediate

Fully deployed the IT infrastructure of a small enterprise (25 hosts, 2 servers, automatic telephone exchange). Administered servers running FreeBSD.
Also was engaged in the design and installation of the video surveillance system. Have a bit of QA experience (manual testing, regression testing, writing documentation and 
Vulnerability Management, light pentest (with scanners covering the base stuff)).

Was in charge of compliance and information security in the bank. Led project on PCI-DSS compliance, successfully passed the international certification and received a certificate of compliance.

Conducted information security audits for companies in various fields of activity.
Successful "from the ground up" implementation of next-gen antivirus (EDR, XDR). Various projects on endpoint protection. 
SOC activities in the field of investigation of policy violations and information security incidents (including mitigation and prevention actions).
Tested solutions from leading vendors of CASB and SWG fields. XSOAR deployment and troubleshooting (in progress).
Security policies and configurations standards development and implementation. (including instructions and documentations for security compliance and awareness).
Vulnerability management process (Vulnerabilities and exploits finding, vulnerability assessment).
Incident response, investigation and correction (mitigation of threats).
Assessment of severity and potential impact of risks.
Next generation antivirus solution implementation.
Endpoint web protection implementation.
Next generation security gateway, CASB deployment.
XSOAR deployment consulting.

Other skills, acquired while working in the security department of businesses and banks.
Head\Lead of IT security or Cybersecurity. Compliance, vulnerability management. Incident response team, incident investigation.
Remote work.

I`m not QA, Developer, Dev-ops, Pen-tester.
Position: Information security manager
Category: Security
Experience: 2.5 years | English: upper


For the last 2 years I have been working as an information security officer. I have skills in preparing and implementing ISMS documents, conducting internal audits, assessing IS risks, managing IS incidents, preparing IS training programs for employees and further implementation, developing an access matrix, passing ISO 27001, ISO 27701, PCI DSS certification audits. I also have experience in expanding the existing ISMS to PIMS. I have experience in configuring and managing DLP system, SIEM system, antivirus software, monitoring tools, access control and management systems, video surveillance systems.
Position: Information security manager
Category: Security
Experience: 2.5 years | English: intermediate

ISO/IEC 27001 Auditor - Information Security Certification
ISO/IEC 27001 Implementer - Information Security Certification
•	Information Security Management 
•	Implementation of ISMS
•	PCI DSS implementation
•	ISO 27001 Internal/External audit 
•	PCI DSS gap analysis
•	Performing awareness programs
•	IS Risk assessment and treatment
•	Developing ISMS documentation 
•	Participation in penetration testing
Position: Information security manager
Category: Lead
Experience: 11 years | English: upper

I've built at least three ISMS from the scratch based on ISO 27001, certified as compliant with ISO/IEC 27001. Have a lot of successful internal/external PCI DSS/ISO27001 IT audits conducted by NBU, TUV NORD, Bureau Veritas etc.
- Knowledge of information security standards ISO 27001, 27002, PCI DSS, NIST CSF - The ISMS certified as compliant with ISO/IEC 27001:2013 - Project Management in IS area - Knowledge of IT security principles, including network security - Experience in Developing Policies, Procedures and Instructions regarding ISMS - Experience in Identification, assessment, monitoring and reporting about information security risks - Business Continuity Management - Vulnerability management - Juniper SRX, NSM, WF, SEP, Cylance, ESET, Windows, AD, Nagios, PRTG, Splunk, Flowmon, Cisco WSA, FirePower, AWS Security Hub, Guard Duty, Tenable, OpenVAS, Wazuh, Burp Suite, Atlassian Jira, Insight Service Catalog, Kibana etc. - Understanding of cryptographic key management methodologies for the protection of payment card data for payment transaction processing - Strong analytical skills - Strong organization and time-management skills - Strong computer skills - Good analytical and problem solving skills
Get interesting position in a stable company to apply the acquired knowledge and experience in a new job
Position: Information Security Manager
Category: Security
Experience: 4 years | English: fluent


5+ years of experience in big4 and financial institutions across all regions (multi-cultural, international environment).

I was leading various projects in HR, IT and Cybersecurity. 
Fluent in English and Polish.
Master degree with Project Management specialization (Warsaw School of Economics).
Trained and certified Scrum Master (PSM I).

Advanced skills: 
Atlassian - Jira, Jira Service Management, 
M365, 
Azure DevOps, 
ServiceNow, 
Mural for Design Thinking sessions
Position: Information Security Manager
Category: Security
Experience: 7 years | English: upper

Certified ISO 27001 Lead Implementer; During latest internal audit got highest rating; Implementation and documentation of Port security; Implementation of access to the Internet through AD; ITIL-Sec Information Security Management Certificate.
Implementation of Information Security Management System (ISMS); Development and implementation of information security policies, processes and instructions; IS monitoring according to ISO 27001 and NBU requirements; Preparation and organization of employee awareness in information security; Management and risk analysis; Review and update security documentation; Project management for the implementation of information security tools.
Challenging tasks, career advancement, improvement of professional skills.
Position: Information Security Manager
Category: Security
Experience: 11 years | English: fluent

CISSP - Certified Information Security Professional
Information Security Manager for 4 years, with over 8 years in CyberSecurity/Information Security and 15+ years in IT Infrastructure. 
I have extensive experience in the Information Security and Cyber Security space across the entire breadth of the scope.
I am looking for full time work in Kyiv/Kiev as a CISO,  Information Security Manager, Information Security Officer or above.
Position: Information Security Manager
Category: Security
Experience: 6 years | English: upper

Restoration of a complex software development project. Development of documentation in accordance with IS standards. Incident investigation and forensic. Perform complex projects like IT and IS audits, SOC implementation, penetration testing, security assessment. Experience in creating a profitable business.
I Supervised several projects of Information Security Management Systems (ISMS) development and implementation. Also, I managed security projects like SOC implementing, penetration testing, company-wide IS awareness program.
I performed security audits, IS risk assessment and mitigation; choosing, deployment, assessment and review of IS technical controls.
Responsible for: GAP-analyze, audit, information security (IS) assessment, risk management, develop and implement IS policies and procedures, technical and compliance controls, company support during the certification activities, leading security team, IS employee’s awareness.
Work experience in next industrials: FMCG, IT Integrators, software development, blockchain, outsourcing.
Expectations: Big, difficult, interesting projects. Personal growing as an expert and manager. Professional teammates and management. A cool manager|CEO that rates my work and my contribution, and gives feedback on my work.
Position: Information Security Manager
Category: Security
Experience: 3 years | English: fluent

- Scored 107/120 on TOEFL (certificate's outdated - my skills are not)
- Successfully coordinated 8 teams of 6+ developers aligning with their Product Owners to create a company-wide internal product
- Set up business processes and internal structure for a department of 40+ people.
- Managed to deliver an acceptable result for a phase gate in spite of half of the risks in my risk register firing up simultaneously. 
- Successfully reformatted legacy project documentation that has outlived 6 different PMs during 3 years. The result wasn't perfect, however, it was uniform, readable and reflected reality.
- Managed risk assessment documentation, got it ready for an ISO27001 audit
- Created security awareness program from scratch
I've been working in the software development industry for 5 years. I started in the Legal&Abuse team where I’ve been communicating with key clients regarding legal compliance of their services, managing phishing incident management and collaborating with law enforcement agencies over cyber-crime investigations. After that, I transitioned to the supervisor role onboarding and managing groups of 10+ abuse analysts. Honed my soft skills there, lots of 1-1's and performance evaluations.
That allowed me to switch to the project management with the specification on internal security and compliance projects. 
As a Project Coordinator/Manager, I usually managed mid-sized teams and have been responsible for:
- leading several internal projects related to compliance, communications, and security
- managing a team of up to 6 engineers
- communication with foreign C-level stakeholders
- held presentations of my project achievements for some 600+ people
- keeping the project documentation relevant, laconic, and transparent
- setting up business processes for the department of 40+ people from scratch, developing internal structure on the fly.
Switching later into Information Security Manager role I've :
- conducted full preparation for ISO27001 compliance external audit (passed with flying colors)
- created security awareness program from scratch using KnowBe4 platform for simulated phishing attacks
- been constantly managing the stream of RFIs, RFPs and contract clauses for review on operational basis
- been leading the team of two junior specialists showing them the ropes as we were slowly reworking company's legacy policies into something more short and coherent
Let us set our expectations straight - I'm not an engineer. While I had collaborated with IAM admins and DevSecOps, I was primarily in a management/auditor position with only high-level of understanding of their SME. I don't mind getting more hands-on experience, though.

I would highly appreciate setting clear SMART goals for my performance with clear org-chart position defining my responsibilities.
Position: Information Security Manager
Category: Security
Experience: 11 years | English: upper

Used to build security teams for both multinational on-prem and cloud-native companies
Designed processes based on  experience in technical security and compliance fields
Experienced with enterprise and startup companies
Certified Information Security Professional (CISSP)
Security Operations Manager:
- Hired and managed SecOps team in SaaS product company
- Established continuous security monitoring, incident detection, incident response vulnerability management processes
- Designed security controls for cloud-native product hosted in AWS 
- Designed and executed controls for Corporate Security processes (IAM, EDR, patch management, ZTA)  
- Implemented security controls required for Compliance purposes and participated in audit processes (ISO 27001, 27017, 27018; PCI DSS; GDPR; HIPAA; CSA)
- Coordinated vendor management process from a security standpoint 
- Supported sales engineers on security questionnaires from prospects
Startup or medium-level company where I can build security processes from scratch or adjust it to business goals.
Inspiring, inclusive atmosphere and challenges that motivate.
Position: Information security manager/analyst
Category: Security
Experience: 8 years | English: intermediate

Hackaton Azerbaijan 2nd and 5th place (different dates), motorola radio system successful project, implement NGFW, Kata (kaspersky anti targeted system), Atm security policy etc.
8 years working in IT sec. finance sector. Growing from pentester up to head of it sec. dept. 
Projects: implement Kata, Netwrix auditor, mobile app pentest, internet banking pentest projects, Palo Alto NGFW security check, Swift (customer security program audit (self audit and with audit company)), atm security projects, applocker,bitlocker,  infosec policy creating etc.
Outsource working in different cybersec. projects.
Position: Information Security Manager, ISO 27001 Expert
Category: Security
Experience: 8 years | English: fluent


I’m a security project manager with expertise in ISMS audits and international requirements (ISO ISO 27001; SOC 2 Type 2; PCI-DSS).

I will help you:
- To prepare your business for information security audits
- To analyze the gaps in your security and IT processes
- To implement new and enhance new processes to make your ISMS effective
- To develop a security documentation
- To enchase employees awareness of the topic

I have deep expertise in managing security projects, like:
- Third-party assessment solution implementation
- Product security requirement process
- Active Directory compliance reporting configuration
- Security risk management methodology development
Open only for positions in EU
Position: Information Security Manager / Officer / Consultant
Category: Security
Experience: 8 years | English: fluent

Master degree in Information Security Management, Gjøvik University College, Gjøvik, Norway;

Master degree in the Field of Information and Communication Systems Security, National Technical University of Ukraine "Kyiv Polytechnic Institute", Kyiv, Ukraine;

GDPR Certified Data Protection Officer

ISO 27001 Lead Implementer;

ISO 27005 Risk Manager;

Toefl certificate;

Candidate of Master of Sports in chess.
Information Security Management, Risk Assessment, Telecommunications & Security, Security Audit,
SOX, ISO27k, PCI DSS, Incident Response.
Friendly and professional team, high salary, inspiring goals and career advancement.
Position: Information security officer
Category: Security
Experience: 9 years | English: intermediate


•	EDR, NGFW, SIEM, VMS
•	Incident response management
•	APT expirience
•	Cyber killchaine
•       Enterprise security
•       Security architecture
•       Security audits
•	Threat intelligence
•	Mentor experience in teaching stuff working skills with specialized software
•	Good communication skills
Position: Information security officer
Category: Security
Experience: 11 years | English: upper


- ISACA member since 2009
- Experience in progressive and innovative leadership in the
performance of consulting, internal and external auditing, ISO
27001, NIST, GDPR, CSA, PCI DSS frameworks, Sarbanes-Oxley
compliance, System and Organization Controls (SOC) examinations,
risk assessments, and process improvement.
- Management of IT projects.
- Implementation of process management according to ITIL, COBIT
- Implementation and maintenance of DLP solutions
- Implementation and maintenance of SIEM solutions
- SOC implementation
- Experience in creation and implementation of disaster recovery
architecture of information systems (Disaster RecoveryPlanning),
implementation of High Availability systems
- Experience in the development and implementation of the
regulatory framework for information security.
- Implementation of a set of activities related to the control and
protection of information based on developed programs and
techniques, work with special information security tools.
- The experience of testing new systems in terms of compliance with
the security criteria established by policies and standards.
- Experience in implementing ITSM
Position: Information Security Officer
Category: Lead
Experience: 11 years | English: fluent

I've grown as a team lead/manager and didn't lose hard skills. I worked in multicultural environments and liked it. I automated and build many exciting things in a SOC and can tell you in more details in a call/meeting.
10+ years in Cyber Security and 15+ years in IT. I can handle full stack of Cyber/Information Security in small to medium companies. I've been focused on Security Operation Center management during last few years and had worked as a technical person (engineer, analyst, architect). I'm working on my CISSP and have Security+/CEH/many other certificates.
Responsibility and appreciation.