Position: Фахівець з інформаційної безпеки
Category: Security
English level: upper
Years of experience: 2


Information Security Specialist (2021 to the present)

Administrator of information security software systems. (2020)
- Work with Symantec Endpoint Protection Manager (SEPM). Deployment, Firewall policy settings, Device Control, Application Control. Deployment of antivirus agents on the domain PC and non-domain infrastructure.
- Work with Bitdefender Gravity Zone Ultra. Configuration of multi-layer protection modules: Firewall, Device Control, Program Control, Web Control, Sandbox Analyzer, HyperDetect, AntiExploit, IDS (Intrusion Detection System), EDR (Endpoint Detection and Response), Quarantine, Anti-malware, Risk Management
- Work with a platform detection of complex and targeted attacks EDR (Endpoint Detection and Response). Reaction, analysis and investigation of incidents. Work with a system of detection of complex threats at the endpoints. Detection of malicious activity, investigation of events and organization of response to events. Setting rules. Organizational work on eliminating problems in the incident. Symantec, BitDefender Gravity Zone Ultra, Microsoft 365 Security, Office 365 Cloud App Security.
- Work towards control of privileged users PUM/PAM. Deployment, settings, testing. Wallix Bastion, Fudo Security, Microfocus, Cyberark
- Work on Hardening of Operating Systems. OS analysis and settings. Search and eliminate vulnerabilities. Setting up tasks to the IT department  on the results of an analysis on vulnerabilities.
- Control of illegal user activities:
    Web control - Checking events for visiting sites that may be potential damage to the company's information infrastructure (porn sites, phishing, mining, narcotics) from working PCs . Creating relevant response tasks to similar incidents. 
    Installation, or an attempt to install pirate or malicious software, portable software, cloud storage programs, social networks and inconsistent messengers. 
- Control of using USB devices (Device Control). Regulation, coordination and introduction to the registry of legitimate devices and flash drives. Messages of the company's departments in the fact of special illegal critical events.
- NMAP, OpenVAS, Lynis, Lunar, Sn1per
- Participation in the company's POC, and the study of the functional of information security products. Siem, Soar, DLP, Patch Management, PUM/PAM, WAF, Deceptions, Network Detection, and others.