Position: Chief Specialist, Information Security Department
Category: Security
English level: intermediate
Years of experience: 2


Banking Service Bureau of the National Bank of Kazakhstan 
December 2022 – Current
Chief Specialist, Information Security Department

• Administration of information security systems NTA, NGFW, WAF, SIEM, EDR, Email Security, IPS/IDS, Anti-DDOS and SOAR
• Conduct a comprehensive investigation of various information security incidents, and identify sources of threats (SOC L2)
• Changing policies/rules and signatures response of information security systems to prevent potential types of attacks (SOC L2)
• Participation in the development of a cyberpolygon as a Red Team specialist
• Organization of phishing attacks to improve the competence of employees in the field of information security
• Piloting various information security systems and tools to test the level of effectiveness in the organization network (Fidelis, PT NAD, Pentera, Cisco Secure X)
• Ethical hacking of external resources of the company and subsidiaries to identify vulnerabilities and further improvement of their security
• Document management, MISP reporting and GLPI ticket system

-------------------------------------------------------------------------------------

National Information Technologies JSC 
September 2022 – December 2022
Cybermonitoring and Incident Investigation Engineer

• Monitoring and investigation of information security incidents by SIEM Qradar (SOC L1)
• Administrate scanner tools Maxpatrol and Nessus, conduct regular vulnerability scans within the organization networks, systems
• Ethical hacking of an organization resources to identify vulnerabilities and demonstrate their potential impact using techniques such as social engineering, network scanning, and application testing to evaluate security controls.

-------------------------------------------------------------------------------------

MSSP.GL Kazdream Technologies 
June 2021 – September 2022
Information Security Engineer

• Perform comprehensive security assessments of systems, networks, and applications to identify vulnerabilities and potential entry points for unauthorized access
• Perform penetration testing to simulate real attacks to evaluate the effectiveness of existing security controls
• RedTeaming: assessing and improving the skills of the information security team to respond to targeted attacks