I am involved in vulnerability trend analysis, improving Vulnerability Management practices, and competitive analysis of Vulnerability Management solutions.

I was engaged in various activities related to Vulnerability Intelligence, VulnerabilityManagement, Compliance Management and custom automation of Infrastructure Securityprocesses:- Track vulnerability news, notify stakeholders, create and track remediation tasks- Control the coverage of IT systems by Vulnerability Management process andexpand it, investigate the limitations of Vulnerability Assessment tools- Constantly update targets for scanning network perimeter and… Show more I was engaged in various activities related to Vulnerability Intelligence, VulnerabilityManagement, Compliance Management and custom automation of Infrastructure Securityprocesses:- Track vulnerability news, notify stakeholders, create and track remediation tasks- Control the coverage of IT systems by Vulnerability Management process andexpand it, investigate the limitations of Vulnerability Assessment tools- Constantly update targets for scanning network perimeter and internal networksfrom various sources (CMDB, Wiki, DNS servers, AD, Network Monitoring tools),control network access and scan credentials- Provide Vulnerability Assessment of network perimeter and internal networks withvarious tools (Nessus, MS Defender for Endpoint, Vulners Linux API, OpenSCAP)- Prioritize detected vulnerabilities based on descriptions, exploits, CVSS, CWE,attacks, malware, patches- Prepare Remediation Tasks for IT teams and develop remediation playbooks- Develop content and engine, perform assessment and make hardening tasks- Provide metrics for agents installation (Antivirus, Endpoint Security, Data Leakage- Protection, SOC support, etc.), classify critical hosts and networksSplunk / ELK + Grafana, Python, >40 dashboards, > 20 custom connectors Show less

Established automated Vulnerability Management process based on:- Tenable SecurityCenter/Nessus + Acunetix as the main network vulnerabilityscanners. Qualys, Rapid7 Nexpose, F-Secure Radar in testing and comparison- Various IT systems: Palo Alto NGFW, Atlassian Confluence, Jira, CMDBsSplunk, Python, various API integrations

Built the Competitive Intelligence function in the company. Produced various productcomparison reports for inside and outside customers. Markets: Vulnerability Management,Policy Compliance, Web Application Firewall, Web Application Scanner, ApplicationSecurity Testing SAST/DAST/IAST, Anti-APT, SIEM.

Participated in the development of the Vulnerability Management product MaxPatrol 8.Implemented various Security Compliance checks for *NIX systems (FreeBSD, HP-UX,AIX, OES NetWare, Solaris, RHEL, CentOS, Ubuntu, Debian) in the Vulnerability &Compliance management product MaxPatrol. Generated OVAL/SCAP VulnerabilityDetection Content for Linux distributions, HP-UX, Solaris, etc.

Developed applications for electromagnetic compatibility evaluation (Sun Blade-based HPC system, OpenMPI, C/C++, OS Solaris, Linux).