Igor V.

Detection Engineering, Threat Intelligence, Threat Hunting. Cybersecurity Defense and Resilience.

Leading the team in handling security and privacy incidents using tools like CloudArmor, CloudFlare, CrowdStrike, Netskope, Google SecOps, CrowdStrike, and Google Workspace Manage and Response Threat Intel events and creating, reviewing, and implementing security processes for cloud-native environments. Design, implementation, and continuous improvement of the Incident Monitoring and Response team. Mentoring and developing team members through 1:1s, feedback sessions, and career development initiatives. Leading the identification and implementation of improvements in the security monitoring environment based on the NIST and MITRE frameworks. Conducting risk assessments to define implementation priorities in the information security plan and continuous improvement Spearheading the testing of new tools and defining requirements. Overseeing Threat Hunting, table tests, purple team exercises, and use case management. Task automation and the creation of SOAR playbooks. Promoting and fostering a culture of security awareness and good practices within the team and organization. Supporting internal and external audits and defining secure architecture. Managing the creation of monitoring, dashboards, alerts, playbooks, runbooks, manuals, executive reports, and training materials. Creating and monitoring operational and strategic security indicators. Developing and implementing incident response processes and procedures. Participating in defining and creating internal information security standards, policies, and architecture. Helping awareness team with examples, authoring courses and presenting workshops.

Creation, review and implementation of security area processes. Support in equipment management and policies in cybersecurity equipment. Design, assessment and improvement of architecture to improve security capabilities Prioritization of deliverables and definition of long-term strategy Communication, suggestion for evangelizing good security practices for different teams Creation and monitoring of indicators. Support and handling of IT security incidents and threat hunting. Support in the treatment of infrastructure and application vulnerabilities; Support in audit processes. Definition and creation of internal information security standards and policies. Definition and evaluation of secure architecture and best practices. Identify, analyze and evaluate the risks related to information proposing corrective or preventive measures. Interlocution of customer needs with internal security teams. Propose mitigation measures and control of the risks evaluated. Establish and disseminate security policies and procedures. Disseminate, raise awareness and motivate good safety practices. Monitor and evaluate the security measures implemented.

Security and Network Operations Center (SNOC) and Threat Intelligence (Threat Intel) as Technical Manager Creation, review and implementation of SNOC and Threat Intelligence processes Conducting 1:1, feedbacks, and career development of team members Prioritization of deliverables and definition of long-term strategy Address and respond to IT security incidents and threat in cloud environments. Risk based analysis to define, prioritize and improve the security processes Identification and implementation of improvements in the security monitoring environment based on NIST, MITRE and ISF frameworks. Support in equipment management and policies in safety equipment. Testing new tools and defining requirements Threat Hunting and case management Creation of monitoring, manuals and training. Creation and monitoring of indicators. Creation of processes and procedures to respond to incidents Participation in the definition and creation of internal information security standards and policies. Definition of secure architecture Maturity assessment and security team reorganization.

Freelancer Instructor on Cybrary. Creating courses and questions. www.cybrary.it

Acting within the Security Operations Center ( SOC) Security Operations Center. Creation, deployment and improvement of SOC processes Address and respond to IT security incidents in on-premises environments and cloud environments. Identification and deployment improvements in the security monitoring environment Risk based analysis to improve the security detection and response Management of equipment and policies in security tools. Testing new tools and defining requirements Creation of monitoring, manuals and training. Creation and monitoring of indicators for SOC service catalog Creation of processes and procedures to respond to incidents Discussion of security architecture para environments on premises and Cloud environments.

Acting within the Security Operations Center ( SOC) Security Operations Center. Creation, deployment and improvement of SOC processes Address and respond to IT security incidents in on-premises and cloud environments. Identification and deployment improvements in the security monitoring environment based on frameworks NIST, MITRE and ISF Risk based analysis to define, prioritize and improve the security processes Management of equipment and policies in security tools Since January/2018 - Leader of the Security Incidents team Since November/2019 - Coordinator and responsible for the areas of security incident response, threat monitoring and SIEM. Security teams management Feedbacks, and career development of teams Vice coordinator of the incident response technical group at Febraban from October 208 to April 2021. Participation in the definition and creation of internal information security standards and policies Analysis and implementation of regulatory policies in the SOC Testing new tools and defining requirements Creation of monitoring, manuals and training. Creation and monitoring of indicators. Creation of processes and procedures for incident response, event analysis and Threat Intelligence. Discussion of Security architecture for on-premises and Cloud environments

Working at Security Operations Center as Security Incident responder leader. Our team is responsible to handle security incidents and improvement of security incident handling procedures. Proof of concept on new tools, Forensics Analysis and Artifact analysis Creation and maintenance of runbooks and process to handle security incidents. Working close with SIEM team to create better detection rules and automation of the incident response tasks. Test, training, table top and simulation exercises to test incident response plan. Continuous improvement of incident handling process based on lessons learned. Creation and review of corporate policies and standards. Use and management of IPS, WAF, AntiDDoS, Endpoint Protection, DLP, Anti-DDOS, Forensic and other tools from Trend Micro, Symantec, RSA, Netscout, F5, Arbor, Cisco and others.

Working at Security Operations Center. Our team is responsible to answer security incidents and improvement of security monitoring. Working with IPS, DLP, Anti-DDOS, Forensic and other tools from Trend Micro, Symantec, RSA, Netscout, Arbor.

Implementation and support of the corporate network and DMZ. Responsible for the implementation and supply of Routers, load balancers, Switches, Firewalls and network services such as Proxy, VPN and DNS. Search and fix vulnerabilities in equipment and internal network. Use of equipment from manufacturers such as Cisco. Checkpoint, F5, and others. Performance troubleshooting of applications and network and network services.

VB6 language programming.

Crew member working on Mc Donald's while was a participant of an exchange program.

Network administration, help-desk, server and database administration, Java/C/PL-SQL programming.

Specialization Cyber Security. Hands On. Offensive and Defensive subjects. Total 80 hours https://www.daryus.com.br/pos-graduacao/cyber-security

Continued Education Course in Cyber Security. Hands On. Offensive and Defensive subjects. Total 280 hours. https://www.daryus.com.br/pos-graduacao/cyber-security