Matti Heikkila Email & Phone Number

Luxembourg

Luxembourg, Luxembourg

Luxembourg

As the team lead for IT security I am responsible for ensuring the organization follows and applies security best practices. This begins with developing an IT security awareness training program and conducting sessions, IT Security architecture analysis and design, and providing IT security guidance to application / system developers. I fulfill a governance role within the organization and document organizational security standards, procedures, and processes in-line with organization policy and the regulatory requirements (CSSF e-money institution and PSD2). I perform risks assessments along with technical compliance checks (eg: Vulnerability assessments / Penetration tests) to identify gaps in current practice and adherence to policy and standards. Additionally I have integrated security into the Devops pipeline through the use of container security scanners, SAST, and DAST systems.

Luxembourg

Luxembourg

A data analytics company specializing in analyzing the Luxembourg real-estate market. Through our data collection activities and econometric modelling Houser is able to provide accurate property prices for apartments and houses within the entire country of Luxembourg.As the co-founder and CEO of Houser I conducted sales and marketing presentations for customers, investor pitches and raised capital, developed business plans and budget forecasts, and negotiated the eventual Merger and Acquisition of the company.The Houser infrastructure is hosted within a cloud environment and I was responsible for ensuring the correct design and deployment of the infrastructure within different cloud providers (Azure, AWS) using Docker containers and Kubernetes orchestration services. To monitor the real-estate market I developed and maintained an asynchronous data scraping process system using Python and RabbitMQ to provide reliable and scalable infrastructure

Luxembourg

IT security consultant* Perform penetration testing for internal and external customers* Participate in RFP packages for future contracts

Luxembourg

Part of the Cyber attack response team.Performed incident handling dealing specifically with APT actors. Including Forensic memory/file-system image acquisition, Forensic analysis of suspected machine images, Reverse engineering malware with specialized tools (eg: IDA, Windbg, Custom internal tools). Automated systems were developed and maintained internally to allow self-service capabilities to customers and improve response time and quickly identify and single out samples for further manual analysis. In addition to incident handling tasks the team was responsible for providing Subject Matter Expertise for investigations (eg: counter-intelligence, data leaks, etc).

Web developmentIT system designInformation managementInfosec documentationPenetration testing

IT architecture - Security designReview security design of other projectsEnsure compliance with Data privacy guidelinesAssist projects with data classificationResponsible for vulnerability management and remediationDraft architecture standard documents for Enterprised implementation (WIFI and DMZ)

Project management for the security accreditation of the NATO HQ business LANReview security assessments and provide actionable recommendations to the IT teamsPerformed gap analysis (including cost benefit analysis) on NATO HQ practices Evaluated RFP bids to ensure technical compliance and pricing evaluationReviewed security procedure and technical standards documents

doing lots of cool stuff