Kostya Vasilkov Email & Phone Number

• Designing and executing competitive evaluations and proof of concept projects to assess cyber security solutions across various security domains (Endpoint, Mobile, Application Security, Industrial Control System, etc.):ⓐ Threat modeling of the relevant domain for each evaluation project, emphasizing most significant trends and incidents that influenced the Attack Surface. ⓑ Designing a testing methodology - forming a list of the most applicable threats and attacks and gathering the success criteria from all relevant parties in the organization.ⓒ Deploying the testing environment in the Lab. It includes the eco-system required for the security products, the products themselves, and the infrastructure required for the applicable threats and attacks to run. In the course of my job, I deployed, managed and used dozens of security solutions in various domains.ⓓ Offensive testing - executing all the applicable threats and attacks to assess the products' security efficacy.ⓔ Generating thorough "product evaluation" reports, which aided stakeholders to make crucial business decisions, determining whether to invest in or integrate the product into the enterprise security stack.• Managing and maintaining an on-prem Lab, which utilized for evaluation projects and for other departments' requirements.As the lab's founder, my responsibilities included connecting all hardware components (server racks, network switches, routers, firewalls, etc.) and deploying/configuring necessary software.• Collaborating with security firms, ranging from early stage start-ups to large corporations, to stay informed about emerging security trends and evolving security solutions.Assessing their relevance within the constantly evolving cyber threat landscape.

• Researching and testing malware and exploits vs enSilo’s products• Train, support and deploy enSilo’s product on customer’s site (Cloud + EP clients)• Analysis of security events from customer’s cloud environments and improve internal modules to reduces false-positive events• Dynamic and static analysis of emerging threats, results were published in internal and external reports and blogs• Developed an automation environment for ransomware research project (Python, Cuckoo)

• Developed tools to automate the procedure of detecting and classifying malware (mainly Python)• Performing dynamic and static analysis of Financial and Enterprise malware, including classification of new malware using Yara and sandbox solutions• Tech lead and trainer of analysts providing a service for Trusteer’s enterprise clients• Testing malware and Exploits vs Trusteer’s security products• Investigation of new bypasses techniques for Trusteer’s products to enhance the product resistance to new threats

• Performing dynamic and static analysis of malware samples provided by detection partners, using VMware stations installed on Linux machines and the SysInternals Suite• In-depth analysis of infected machines’ memory dumps, Trojans’ configuration file code, and Trojan binaries

• Providing immediate 24x7 customer-facing service in a highly-responsive environment• Conducting in-depth analysis and monitoring of suspected phishing websites• Extracting forensic items from phishing kits to uncover phishing attack drop points such as webmail accounts and hosted PHP files• Contacting major ISPs and web-hosting providers worldwide

• Providing tech support via phone and chat for private and corporate clients for various Microsoft products such as: Windows, Office, Games, Hardware, etc.• Writing blogs for Microsoft’s official website• Training and qualifying new Tech Support engineers