Position: Senior Cybersecurity  Engineer
Category: Security
English level: fluent
Years of experience: 8

Successfully manage and coordinate. Defining, directing and maintaining the information security program across the company's different product development and largely independent business units/products Implementation of Information security management system governance according to the ISO27001 Performing audits of ISMS and Privacy programs for compliance with the requirements of the EU GDPR and the ISO27001. 

Developing and update information security and privacy documentation according to the EU GDPR Supporting surveillance audits for compliance with the ISO 27001 Developing and implementing Information Security and Privacy processes Partnering with application/system owners to identify Information security and privacy risks and establish an appropriate security controls, remediation plans, and improvements.

Developing trainings for different topics: 
Information Security, EU GDPR introduction, Privacy by design in software development, Privacy and Security Basics, Incident response, etc Managing security threat and vulnerability assessments Project Management, Project coordination Handling Information Security and Privacy Incidents And more...

Licenses & Certifications:

* IBM Cloud Essentials - IBM

* Cloud Native Security Conference - Data Security - IBM 

* Networks Cybersecurity Specialization  Palo Alto 

* Network Security Administrator (NSA)-1/2/3 - Fortinet

* 210W-11 Mapping IT Defense-In_Depth Security Solutions to ICS - U.S. Department of Homeland Security

* AWS Cloud Practitioner Essentials - (AWS) 

* AWS Well-Architected - (AWS) 

* Google IT Support - Google

* Information Systems Auditing, Controls and Assurance - The Hong Kong University of Science and Technology
Work with external vendors to perform penetration tests on network devices, operating systems, databases, and Applications as necessary Create and hold workshops illustrating the state of the art of various technologies and assessment strategies Work on improvements for security services, including the continuous enhancement of existing methodology material and supporting assets. 

Penetration Testing: 
Open-source intelligence (OSINT), Vulnerability scanning and exploitation, manual verification, API testing, network infrastructure penetration testing Burp Suite, Postman, nmap, metasploit, sqlmap, testssl, nikto, wireshark, dnsrecon, dnsmap, subbrute, amass, censys, shodan, OpenVas, the Harvester Stress testing - slowloris testing, locust framework, slow query OWASP Web Security Testing Guide, OWASP Application Security Verification Standard.

Documentation: 
Able to follow,full SDLC process. Drawing up and structuring documentation, config plan, processes Writing instructions and guides both for internal use and for users in Confluence. Status and final report writing. Some experience with ISO27001 and other frameworks 

Mobile testing: 
IOS and Android testing OWASP Mobile Security Testing Guide Unpacking, disassembling, intercepting traffic, re-signing the application, API testing

DevOps:
- Develop and implement complex tasks related to Cloud architecture
- Infrastructure as code with Terraform/Terragrunt;
- Develop deep expertise with Kubernetes, Helm, Ingress;
- Solution migration from on-premise to cloud;
- Development of CI/CD workflow for highly scalable and resilient cloud-based applications;
- Apply AWS Well-Architected principles to production systems and operational support tooling;
- Supporting and maintaining the infrastructure;
- Ensure a high degree of observability of infrastructure and services;
- Document our infrastructure, push for infrastructure-as-code.
In my previous job, my expectation—based on the job description and interview—was that my job would involve working primarily on team-based projects. Ultimately, many more of my projects than expected were ones I developed and completed on my own. While my expectations were not quite met, this independence allowed me to greatly strengthen my skills in all aspects of project development.