John Torakis Email & Phone Number

Greece

After working with the amazing SecOps team, joined Form3's Infosec Onboarding Services Team to assist with IT Security Standards, provide security advice to Engineering Teams and help with the "shift left" and "secure by design" principles.

Joined Form3's amazing Security Operations Team as a Sr. Security Engineer to participate into some great SIEM engineering!- Maintain and extend security logging for Form3's AWS infrastructure- Collaborate with various engineering teams for extracting security logs from a lot of Form3 components- Centrally manage security logging for all three primary cloud platforms (AWS, GCP and Azure)- Utilize Terraform as a Infrastructure as Code tool to manage every aspect of the SIEM- Actively participate in the design and implementation of Form3's Multi-Cloud SIEM infrastructure

Athens, Attiki, Greece - Remote

Skroutz trusted me with the Tech Lead position of the Security Team. In this role I kept my hands-on part of the job and also managed the tasks of the Security Team.- Acted as a technical point of contact on matters of Security for the whole Platform division, participating in, auditing and suggesting secure designs- Managed Security Team's tasks sticking with Agile principles and ceremonies- Designed and implemented several designs for AWS Security Tool management

Athens, Attiki, Greece - Remote

Got into Skroutz to join an awesome Security Team of 4 and do my part on creating Security Infrastructure and Dev-oriented processes.- Actively participated in the architecture of a Cloud SIEM on GCP- Introduced Infrastructure as Code on Security assets, both with Cloud and on-prem infrastructure- Wore the SecDevOps hat and participated in Containerization and Orchestration of Skroutz Infrastructure by planning and implementing Security controls for Container Technologies (Container integrity, Kubernetes Hardening)- Took part in adding Security Testing and integrating Security Development LifeCycle (SDLC) in the Development process

Athens, Attiki, Greece - Remote

Joined Beat to kickstart the Security Team of the company, launching Security Team Roadmaps, Requirements and Objectives.- Conducted Penetration Tests and Audits in Beat's internal network, products and cloud infrastructure.- Doubled as a DevOps Engineer, designing and implementing a centralized Security Information and Event Management (SIEM) solution.- Up'd the Security Mindset of Engineers by conducting trainings of secure software development both for Backend and Mobile Developers.- Took part in the PCI DSS certification of the company with in-house Web and Mobile Secure Development Trainings.

Joined CENSUS as a Security Researcher and Engineer. Conducted several kinds of Penetration Tests, both alone or as part of teams. Projects that I have led or participated in:- Web application/API tests- Mobile assessments (Android/iOS)- External/Perimeter simulated attacks- Internal/Infrastructural Audits/Insider Threat scenariosAlso worked on Incident Response projects, both on-premises of clients and AWS environments.Finally, lead a Red Teaming Dev-Ops project, managing on-demand infrastructure for External/Phishing attacks and campaigns on AWS.

Investigated hundreds of cases for corporal clients. Became familiar with several Corporal Setups and Network Appliances (Cisco ASA, Palo Alto, Imperva to name a few), both with their capabilities and differences and their logs.Additionally, got familiar with Microsoft Active Directory events and common attacks and their traces.

Bachelor Of Science (Bsc), Informatics, 7.7/10

Activities and Societies: A.U.E.B. Infosec Lab - https://www.infosec.aueb.gr/Main Courses: - Information Security - Network Security.

High School Degree