Nikita Gusev Email & Phone Number

Moscow, Ru

Москва, Москва, Россия

Москва, Россия

• Presale of SOC-services, pentests, OSINT (DRP) and more;• Conducting pilots as an analyst (SIEM, IRP, DRP): o Participating in the construction of VPN tunnel; o Organisation of works on installation of SIEM components in the customer's infrastructure; o Connecting customer's sources to SIEM, IRP and checking the correctness of events incoming; o Adaptation of normalisation and correlation rules to customer sources and events; o Monitoring and analysing incidents occurring in customer infrastructure; o Generating weekly, monthly, and closing reports on pilot projects.• Conducting webinars, presentations;• Public speaking at conferences across Russia;• Moderating a session at SOC-Forum '22;• Participation in service development of OSINT, DRP, PDNS services;• Improvement of internal processes.

• SOC incident management at the 3 line level;• Management of SOC team on LE international customer projects;• Consultation of customers on IT infrastructure security enhancement;• Developing use-cases, playbooks to detect advanced attacks;• Preparation of plan, methodology and system for penetration testing;• Conducting internal and external testing (including phishing and social engineering);• Vulnerability Management;• Conducting security analyses;• Participation in pre-sales;• Administration and use of security systems: o Azure Sentinel; o Microsoft Defender ATP; o Symantec Endpoint Protection; o ELK o Tenable Nessus; o Zscaler; o Fortigate Fortianalyzer; o IBM Qradar; o Trend Micro Deep Security; o Trend Micro Apex One; o Trend Micro Apex Central; o F5 WAF.

Москва, Москва, Россия

• Collection and processing of information about software, infections of information systems through malware, reporting;• Preparing recommendations to improve the level of security of customer infrastructure;• Ensuring prompt response to information security incidents;• Malware analysis using Sandbox-systems and manually using IDA, Ghidra, Process Hacker;• OSINT (attacker's C2 investigations, attacker's identity disclosure);• Monitoring and administration of Zabbix;• Working with systems of defence tools, IDS, IPS, Anti-APT, and cyber threat early warning line systems.