Kostas Galanomatis Email & Phone Number

Athens, Gr

Athens, Attiki, Greece

Athens, Attiki, Greece

I got promoted at Obrela to Threat Detection and Response Analyst (L2). I had to learn new cyber security related products like Hoxhunt, Cisco FMC, ServiceNOW and Digital Shadows for my new responsibilities.My main responsibilities were:- Perform further investigation and response actions (when needed) to high security incidents that were escalated by Cyber Security Analysts (L1).- Direct contact with the Customers regarding the high severity incidents and suggested countermeasures to avoid future re-occurrences.- Provide guidance and assistance to L1 team by doing training sessions regarding procedures and investigation paths.- First level support (on-call duties) during weekends to assist L1 team.- Perform Quality Assurance to track possible mishandle incidents.

Athens, Attiki, Greece

As a Cyber Security Analyst (L1) at Obrela, I learned to work at an MSS environment with multiple customers across the globe and thus multiple cyber security related products such as SIEMs (MicroFocus ArcSight, Microsoft Sentinel), EDRs (Kaspersky Anti Targeted Attack Platform (KATA), FortiEDR) and Brand Protection (ZeroFox).My main responsibilities were:- Receive, prioritize and investigate security alerts/incidents using the aforementioned technologies in real-time. Working on 24/7/365 shift rotation scheme.- Escalate security incidents to the customers based on the engagements of the company.- Escalate high severity security incidents to Threat Detection & Incident Response Analyst team (L2).- Finding false positive alerts and suggest possible filter-outs to Threat Detection & Incident Response Analyst team (L2).

Athens, Attiki, Greece

During my mandatory 9 month military service, I got the chance to serve the Hellenic Army as a Cyber Security Analyst.My main responsibilities were:- Monitoring CheckPoint Smart Console/Event: + Receive, Prioritize and Investigation of Security Alerts and their possible impact. + Apply change to Rules and Filters (for better detection or for suppression purposes). + Create Python scripts to automate blocking procedures of malicious IPs. - Monitoring Sophos XG Firewall: + Create Python script to automate duty procedures to avoid human-error mistakes. - Monitoring ELK + Wazuh: + Log Investigation through ELK Stack. + Suggest dashboard changes. - Monitoring Kaspersky EDR: + Interpret the reports to find malicious files and report it to the officers for Incident Response purposes. - Perform other internal procedures like creation of reports and documentation.

Master'S Degree, Digital Systems Security, 8,67

Master Thesis - Web Server Security Hardening (CentOS Use Case) - Create a bash script to automate the procedure of hardening the CentOS 7.

Bachelor Of Science - Bs, Computer Science, 6,52

Bachelor Thesis - Categories, Prevention and Mitigation of Denial of Service (DoS) Attacks