Position: Cybersecurity specialist
Category: Security
English level: intermediate
Years of experience: 4

- education mentor in The Cybersecurity Professional Development and Reintegration Program for ATO/JFO Veterans "Cyberdefenders"
- an analogue of Virus Total (I needed to automate the initiation of a scan, collection and parsing of antivirus logs);
- project of automation of analysis of OS dumps of malware C2 panels;
- project of automated jailbreak and data extraction from iOS devices;
- investigation of major cybersecurity incidents, including at the state level;
- several publications and a speech at the conference as a speaker;
- I am the Project Manager of an internal product for collecting and accounting data from open sources, where I built the infrastructure, logic and automated most of the processes.
In short, the main theses of my professional activity: I am a member of IRT, which means that my responsibilities include timely response to any kind of information security incidents. I took part in investigations related to: fuzzing, DDoS attacks, hacker attacks, both massive and targeted (including from the side of APT groups), etc. I have had extensive experience with server research with C2 panels over 10 different botnets. My main work is not the classic forensics with the seizure and collection of digital evidence from Windows computers and answering specific questions of the investigator as part of the investigation, but just quite atypical situations that I dealt with. Most often, I have to resort to non-standard methods of finding and solving problems using the Linux Shell. I have successfully implemented such tasks as parsing logs, searching for data in the file system, automating processes, working with databases, and so on. Also, in case of a large amount of input data, I actively use Splunk.
Working on an interesting project or process that will drive and motivate me to grow in all aspects.