Position: Cybersecurity Analyst
Category: Security
English level: fluent
Years of experience: 1.5


- Continuous security of client organizations by monitoring active directory logs, firewall logs, IDS/IPS logs, NAC logs, WAF logs, database logs, and network traffic using multiple SIEM (Arcsight, Qradar, Alienvault, Splunk), EDR, and XDR  solutions for unusual or suspicious activity. Interpreted activities and made recommendations for resolution.
- Investigating malicious domains and IPs using open-source tools, and recommending mitigation actions based on analysis.
- Threat Hunting.
- Incident Response.