Position: Vulnerability scanning, Cyber security, Antifraud, KYC, AML, GDPR
Category: Security
English level: intermediate
Years of experience: 3


Security analyst    11.2021 - Now

Conducting penetration testing and vulnerability scanning. WAF and Firewall testing. Analyzing attacks and conducting investigations. SSDLC development.


Cyber Antifraud analytic     09.2020 - 11.2021

Analysis of the company's IT infrastructure using dnsdumpster.com, search for metasploit ports and services. Periodic site analysis using OWASP ZAP, Burbsuite.
Analysis of Android applications SAST, DAST MobSF (adb, emulator), Burbsuite, Frida.
Support of external testing.
Administration of Ubuntu and Centos servers for ELK (Docker) deployment, collection and analysis of logs from various sources.
Incident analysis in Splunk.
Working with QRadar, McAfee, Wazuh.
Analysis of events in WAF, IPS / IDS.
Manipulation of security-related APK, IPA files. Release of new builds in the Play Market and Apple Store.
Participation in application development, support of security issues.
Development and implementation of Antifraud rules, scoring of activity on clients and counteraction mechanisms.

Antifraud manager  08.2019 - 08.2020

Search and identification of high-risk stages in the work of the company, writing tasks for elimination (optimization) and support of tasks. Analysis of anomalies in customer behavior. Search for bugs in the system and database. Identification of risk points for customers and work with the data science team in the development of scoring. Communicate and integrate with external contractors to support additional settings that can be applied as a hard rule or scoring feature. Development and writing of policies and regulations: antifraud, access rights, it ...
E-commerce security 10.2018 - 08.2019
KYC (Merchant and Counterparty Verification), site verification for connecting acquiring services. Processing Chargeback Visa, MasterCard.
Working with mysql, writing scripts.
Maintaining blacklists. Conducting internal investigations. Claim work. Preliminary inspection of operational risks. Communication with other banks and law enforcement agencies. Analysis of information from the EMA.

Chief specialist for fraud risk monitoring and countering cyber threats.  04.2017 - 11.2018

Developing of scoring of suspicious transactions. Configure controls on Arcsight. Initiation and participation in the optimization of bank processes. Detection of internal and external fraud. Working with mysql, writing scripts. Preventing losses of both the bank and customers. Maintaining blacklists. Conducting internal investigations...