Position: Cybersecurity engineer
Category: Security
English level: upper
Years of experience: 4

I'm currently holding several industry certifications like Security+, Pentest+, CySA+, CEH Master, Practical DevSecOps and etc.
Managing the security of software lifecycles by implementing secure CI/CD pipelines with various SAST, DAST, IaC, CaC, and OAST tools to align with DevSecOps maturity levels;
Conducting regular vulnerability assessments and penetration testing of assets to maintain the organization's security posture, ensuring compliance with company security policies;
Continuously monitoring the internet presence of assets, providing stakeholders with real-time threat intelligence and future threat predictions;
Providing consultation services to enhance the cybersecurity posture of organizations in the private and government sectors, leveraging extensive experience in cybersecurity best practices;
Developing Information Security Policies for both private and government sectors, ensuring alignment with regulatory and compliance requirements;
Collaborating with external vendors to achieve maximum efficiency in presales and sales procedures, streamlining procurement processes and improving vendor relationships;
Conducting comprehensive threat analysis of partners by assessing their assets through internal auditing and IT security reviews of architecture, identifying potential risks and providing recommendations for remediation;
Led forensics activities and the Incident Response process for stakeholders, collecting IoCs and collaborating with external stakeholders to ensure a rapid response to incidents;
Conducted various cyber security tests to identify potential vulnerabilities and trained users on cyber security awareness to minimize the risk of human error.
Conducting vulnerability assessments and penetration testing to identify vulnerabilities in IT systems, networks, and applications for over 30 project;
I authored comprehensive security requirement letters for multiple applications. I collaborated closely with external vendors to ensure that all identified security controls were adequately implemented;
Lead IT team in Incident Response processes from start to finish. I played a significant role in the incident response process, working collaboratively with the national CSIRT team to effectively address critical issues.
Demonstrated proficiency in providing expert guidance on IT security best practices, policies, and procedures in accordance with NSA, DoD guidelines, and NIST standards. 
Conducted thorough risk assessments, implemented robust security controls, and creating comprehensive policies and procedures.