Dmitriy Tretyakov Email & Phone Number

Saint Petersburg, Ru

Санкт-Петербург, Россия

- Organization and maintenance of information security processes in the following areas:1) Network Security2) Client Support3) Employee Support- Organization and execution of in-house phishing tests.- Implementation of new practices within teams (e.g., OSINT analysis to prevent potentially dangerous contracts with unreliable contractors).- Supervision and investigation of various incidents related to employee and client data.- Open-source intelligence (OSINT): collection, aggregation, analysis, and validation of data.- Assisting company employees with information security issues.- Assisting in resolving information security incidents (brute force attacks, virus attacks, phishing emails).- Writing checklists for responding to different types of incidents.- Auditing employee, team, and service access.- Auditing team processes (business processes, technical regulations, reporting, etc.).- Communicating with external contractors regarding organizational audits, assisting in drafting technical specifications. Experience in preparing documents and technical specifications for technical teams to meet PCI DSS compliance.- Writing instructions for employees from scratch, as well as maintaining current guidelines.- Auditing external services to ensure their compliance with the company's current information security policies and their safe usage.- Participation in the review of vulnerability reports

Санкт-Петербург, Россия

- Regulation of access policy (including sensitive data).- Tracking the issuance and revocation of employee access to various services and internal company databases.- Monitoring product performance and anomalies in Grafana/Graylog.- Responding to and escalating incidents (technical failures, security, etc.) and preparing post-mortem reports on what happened.- Writing new and modernizing old department regulations.- Supervising and investigating various out-of-box situations related to employee and user data.- Open source intelligence (OSINT) on potential contractors of the company.- Providing expertise to the company's technical departments on possible vectors and ways to implement various methods of attacking the infrastructure and end product, due to a good erudition in black hat methods of action. - Communicating with external contractors regarding OSINT and pentests of the organization, assisting in drafting technical specifications.- Setting up new, as well as modernization of current monitoring of the technical state of the company's product in Graylog and Grafana systems.

Санкт-Петербург, Россия

- G-Suite administration. Setting up users, groups, service accounts, managing access and rights.- Administration of corporate antivirus. Responding to incidents, removing malware, configuring exclusion and access policies.- Helping users solve problems and providing advice on new technologies and software.- Minor automation by writing Python scripts

Санкт-Петербург, Россия

- Installation/Configuration of employee workstations. Systems - Windows/Ubuntu/MacOS.- Purchase, accounting and transfer of equipment to employees.- Enrollment of users and machines in AD.- Granting access to corporate resources. (storage/mail), version control systems (git, mercurial, svn).- Working with GP.- Helping users solve problems and providing advice on new technologies and software.- Configuration, installation, maintenance of EDS (CryptoPRO).- Equipment accounting in 1C and iTop systems.- Maintenance and minor repairs of office equipment, workstations.- Participation in works related to low-current systems and server equipment (connection, installation)- Writing instructions for the operation of software and IS of the company for employees- Conducting hardware and software inventories.- Assisting the IS department in investigating small incidents. Reading logs of infected machines, searching for vulnerabilities, behavioral analysis of infiltrated viruses, writing abusive and bug reports to owners of infected domains.- Segmented network scanning for vulnerabilities. I also had experience with targeted attacks on dedicated machines.

- Build, install, repair and maintain user workstations.- Pulling lan cables, setting up and maintaining the overall performance of the company's network.- Training users in new PC skills, related peripherals and office equipment.- Maintaining company websites.- Administration of video surveillance systems.- Maintenance of office equipment. Cleaning, replacement / refilling cartridges.- Installation, configuration and support of bank-clients and EDS on user workstations. Also - training of the latest work with all this software and equipment.- Testing of users' machines for the possibility of penetration and exploitation by third parties. Nmap, metasploit, armitage. And subsequent closing of vulnerabilities by patches and restrictions in the work of vulnerable protocols, if possible.