Position: SOC manager, Team Lead
Category: Security
English level: intermediate
Years of experience: 3

IBM QRadar SIEM Foundation
IBM Certified Deployment Professional - IBM QRadar SIEM V7.3.2
Proficiency in IBM QRadar SIEM Deployment
SOC engineer
- Implementation of SIEM systems in the client's existing IT infrastructure;- Restoration of performance of elements of SIEM system and SIEM systemsas a whole in case of failure;- Involvement in the development of technical documentation on SIEMsystems;- Participation in SIEM pilot projects;- Technical support for the operation of SIEM systems- Implementation and development of automation tools;- Working with analytics (creation, processing);- Involvement and accomplishment of tasks for investigation of informationsecurity incidents;- Scripting (bash, Python);- Provide custom scanning of the network (IBM Qradar Vulnerability Manager,Open VAS, Nessus);- Creation, setup of the new correlation rules for detection of new incidents ofinformation security;- Control working of the 1-st and 2-nd line support of the SOC;- Risk management;- Threat hunting.
Deputy Chief of the Center for Telecommunications and Informatization
- Analyzing the operation of systems and providing suggestions for theirdevelopment.- Development of technical solutions.- Monthly planning of work according to directions of activity.- Organization of interaction of structural units in carrying out assigned tasks.- Organization of interaction with foreign organizations.- Organization of maintained communication property.- Organization of classes with staff.- Organization of risk management by activity lines.- Organization and enforcement of information and telecommunication networksecurity measures (including cyber defense and antivirus protection).- Organizing a catalog of capabilities according to the approved form.- Management of the unit in engineering and technical direction and in theabsence of the chief full control.
Development of information security in the company