Dmytro M. SecOps Engineer

Experience

Pentester, Vodafone Ukraine Kyiv, Ukraine

2022-now
Responsibilities:

• pentesting web,mobile-applications, different systems and writing reports;
• making and checking roadmaps to remedy vulnerabilities;
• Vulnerability Management;
• Vulnerability and web-scanning with Qualys;
• SAST scanning with Checkmarx;
• Different Kali Linux tools for penetration testing;
• Security incidents analysing;

Senior Cybersecurity Engineer, DTEK LLC Kyiv, Ukraine

2020-2022
Responsibilities:

• configuring firewalls CheckPoint 6200, 15600, CheckPoint Maestro (Security Policies, Security Profiles, Authentication, Logs, Security Fabric, RA VPNs, Site-to-Site VPNs);
• configuring scheduled backups;
• worked with monitoring systems – PRTG, ELK-stack (monitoring network activity, security risks and troubleshooting corporative networks);

Engineer, SE Informational Court Systems Kyiv, Ukraine

2019-2020
Responsibilities:

• configuring firewalls FortiGate 1000D (Policies, Security Profiles, Authentication, Logs, Security Fabric, RA VPNs, Site-to-Site VPNs);
• basic configuring FortiMail;
• configuring Cisco switches (37xx series) - VLANs, SSH, ACLs, Logs, Security features;
• worked with monitoring system “Solar Winds” to monitor network activity and troubleshooting corporative networks;
• configuring servers: virtualization (ESXi, Hyper-V, KVM), program-encryption server for secure video conferencing and remote access, OpenVPN server, ESET Remote Administrator server and supporting other corporate servers;
• participation in tenders.

System Administrator, LLC National Confidential Networks Kyiv, Ukraine

2018-2019
Responsibilities:

• configuring firewall FortiGate 501E (Policies, Security Profiles, Authentication, Logs, static routes, Web-, DNS-, filtering);
• configuring Cisco switches (35xx, 37xx series) - VLANs, SSH, ACLs, Logs, Security features;
• configuring Cisco (28xx, 38xx series), Mikrotik, HPE routers - SSH, ACLs, Logs, Security features, static routing, OSPF, MPLS, VPLS, MBGP, NTP, SNMP, Tacacs\Radius;
• worked and configured hardware encryptors for building save MPLS-based network;
• worked with monitoring system “PRTG” to monitor network activity, troubleshooting corporative and MPLS networks;
• configuring servers: virtualization (ESXi, Hyper-V), mail (postfix+dovecot), file-share server (Samba), database server (Mysql, PostgreSQL);
• participation in tenders.

Electrician of the station telephone equipment, Ukrainian Special Systems Kyiv, Ukraine

2017-2018
Responsibilities:

• basic configuring switches and routers Cisco 36xx series, Mikrotik and Hewlett-Packard (VLANs, SSH, ACLs, Logs, Security features, static routing, NAT);
• worked and configured encryptors (“Pelena”, “Loza”);
• worked with monitoring system (“Zabbix”);
• business trips which included construction works of subscriber points which provide distributed encrypted channels with high availability (2 channels - 3G and
  fiber).

Assistant of system administrator, State center of information resources of Ukraine Kyiv, Ukraine

2015-2016
Responsibilities:

• received new experience and professional skills;
• became more self-organized person;
• received new experience during working with Linux OS (Fedora, CentOS, Debian), bash programming practice; Windows XP, 7, 8, 10; Windows Server 2002, 2008, 2012, 2016;
• completely investigated hardware of computers, servers;
• got new skills of troubleshooting computers’ hardware and software;

Skills

• Strong knowledge of Linux/Windows OS;
• Understand the principles of functioning of computer networks, encryption, building secure distribute networks;
• Configuring network devices, firewalls, routers, switches;
• Configuring virtualization (ESXi, KVM) and different kind of servers (ftp, mail, vpn, proxy, web, etc.);
• Practical knowledge of networking protocols and TCP/IP-model and services that are used by this model;
• Scripting languages – Bash;
• Participation in building comprehensive information protection systems for customers;
• Integrating and configuring NGFW (FortiGate, CheckPoint, Cisco ASA), SIEM, WAF, DLP etc. for customers;
• Participation in penetration testing using such instruments: NMAP, Wireshark, Metasploit, WPScan, BurpSuite, JohnTheRipper, Nessus;
• AWS;
• Docker, Kubernetes, Ansible;

Education

Odessa National Academy of Popov, Department of Cybersecurity. Got a qualification Master of Cybersecurity.
2020-2021
Odessa National Academy of Popov, Department of Telecommunications and Radio engineering. Got a qualification Bachelor of Telecommunications and Radio engineering.
2019-2020
Kiev College of Communication, Department of Computer Engineering, specialization: Maintenance of Computer Systems and Networks. Got a qualification ‘Data
Center Technician’.
2014-2018