Konstantin R. Email & Phone Number

Limassol, Cyprus

As a member of the in-house SOC team at the major CFD brokerage— Improved Splunk infrastructure by optimizing system design, capacity planning, and custom log ingestion processes— Designed and implemented a low-cost data storage solution based on ClickHouse— Lead the integration of diverse log sources, including cloud and proprietary apps, into Splunk utilizing Vector.dev for log shipping— Integrated Infrastructure as Code (laC) principles into Splunk configuration processes— Gathered Prometheus metrics from the k8s-based log pipelines, visualized them via Grafana dashboards, and established alerts— Knowledge sharing, general documentation

Moscow, Moscow City, Russia

As a member of the lead MSSP SOC— Supported huge SIEM QRadar infrastructure within the SOC— Established and maintained the log pipelines, parsing, filtering, while also developing custom event collection scripts for clouds— R&D and implement best methods to collect security-related logs and normalize them in the MSSP SOC Data Model— Developed correlating rules for SIEM QRadar— Handled all administrative duties for systems such as QRadar, ELK, Kafka, syslog-ng, NXLog.— Guided commercial clients with tailor-made manuals for log source configurations— Automated the deployment of event collection pipelines utilizing Ansible and Gitlab CI

Moscow, Moscow City, Russia

As a member of the in-house SOC team of the largest telecom provider— Maintained the ArcSight SIEM infrastructure within the SOC.— Deployed and managed geo-distributed ArcSight Connectors.— Orchestrated event collection, parsing, and log management across ArcSight SIEM and QRadar.— Performed Unix system administration tasks to support SOC operations.