Stefan Oancea Email & Phone Number

Utrecht, Netherlands

Utrecht, Netherlands

Resellers and MSSPs are at the center of our Secureworks Partner First strategy. In my role I enable our partners from a technical and presales perspectives to integrate, adopt and propose the Secureworks security solutions in order to become successful and differentiate themselves in the marketplace.Some of the activities I am involved in with our partners include:-> Enablement and training-> Integration, design and architecture-> Technical go to market strategies-> Opportunity strategy, support and PoVs for large opportunities-> Help MSSPs model innovative MDR services using the Secureworks platforms

Netherlands

Netherlands

Part of the global presales organization, my goal is to help prospects and customers improve their security maturity and transform and adapt traditional ways of looking at cybersecurity to a more modern, future proof approach. During this process I work together with them to understand their challenges and requirements, technical landscape and medium to long term strategy in order to propose solutions and designs that best fit each individual situation.I am often involved in designing solutions for integrating various components relevant from a security standpoint that are found in modern hybrid environments (endpoint, network and cloud) into a cloud native vendor agnostic XDR platform, usually overarched by end-to-end Managed Detection and Response services. Other areas that I cover from a solutioning perspective include disruptive vulnerability detection and response tooling as well as incident management retainers, proactive consulting and assessment engagements and threat intelligence offerings.

Utrecht Area, Netherlands

From the Security Solution Architect and Engineer role I need to drive new security initiatives, mostly related to the services delivered by the Cyber Defense Center but also alongside colleagues from other departments. My main concerns are related to tailoring the new solutions for our specific needs and making sure they perfectly integrate within our environment. During this process I am also responsible for translating risk, business and services requirements into technical security designs, integrations and products.A few of the most important projects I am / have been working on from this role are:-> Global Security Monitoring: ensure a multi-tiered / multi-customer global environment for providing security monitoring services, from the central Cyber Security Center while also providing for regional customizations-> Cloud Security Monitoring: make use of and integrate cloud specific security tooling in order to ensure cloud security monitoring for a multi-cloud provider landscape. In this process I am working with a few of the major cloud service providers in the market and IaaS / PaaS / SaaS services.-> Network Based Anomaly Detection: design and implement a global network-based anomaly detection environment, with components deployed in a decentralized design while providing for central monitoring and development.-> Build and maintain a multi-layered Security Architecture, specific for the Cyber Defense Center security services-> Ensure security monitoring and use case development for other security specific components such as endpoint protection and EDR

Utrecht Area, Netherlands

Working from the Rabobank Global Cyber Defense Center with the RaboBank Regions around the world for delivering Security and ArcSight Specific ServicesHPE ArcSight SIEM Specialist:-> Administration, Engineering and Content Development on multiple ArcSight ESM platforms ranging from 5.5 to 6.9-> Building Use Cases and ArcSight Content based on customer specific security requirements and scenarios-> Installing, Building and Maintaining both ArcSight SmartConnectors and FlexConnectors-> Building and working with ArcSight ESM Multi-Customer Environment (MSSP like deployment)-> Installing and working with the entire range of products such as ArcSight ESM, Logger, ArcMC and Connectors-> Scripting for ArcSight added functionality/custom developments under Windows and LinuxInvolved in other Security Related projects and Activities such as:-> Developing added Security Controls and implementing them as follow-up for Red Teaming exercises-> Creating and testing security compromise scenarios (worked for example with Cobalt Strike), drawing conclusions, suggesting and implementing added controls-> Deploying Network Behavior Anomaly Detection based solutions such as Darktrace-> Integrating different Security Environments such as Microsoft Azure Security Cloud and HPE ArcSight

 Work with HP ESP portfolio from a technical and presales point of view – main focus, HP ArcSight; secondary focus, HP TippingPoint and HP ATA (Advanced Threat Appliance, advanced malware detection and sandboxing solution) Deliver Implementation and Proof of Concepts for large private customers (banking, insurance, healthcare, telecommunications, utilities) and public sector customers (governmental, defence) Offer active technical support and content development for end users Deliver technical and presales presentations, as well as arranging demo labs for hands-on experience Deliver customer and partner technical trainings Work closely with end users in order to understand their specific security environment and requirements, and propose ArcSight custom content development tailored to their interests Specific ArcSight related experience and skills: ArcSight Express, ArcSight ESM, ArcSight Logger, ArcSight SmartConnectors, ArcSight FlexConnectors Experience in both ArcSight Administration as well as ArcSight Content Development (security scenarios, solution development, reporting and monitoring, developing FlexConnectors) Assembling and delivering technical documentation and presentations, writing projects and technical offers Active member of Protect724 community, currently in top 30 users

 Presales activities for important large customers and partners – Banking, Large Enterprise, ISP/Telco, Public Sector Acting as a consultant for partners/resellers in order to help them promote our solutions and products from a technological perspective Delivering presentations from a technology/products and solutions perspective for partners, end users and at security related events Involved in PoC scenarios in client environment: installing, integrating and testing Fortinet products for demonstrating functionalities and live traffic behavior Assembling and delivering technical documentation and presentations, writing projects and technical offers

 Working with large customers like large enterprise, clients with distributed environments, banking sector, ISP and Telco sectors Understanding clients’ infrastructures, identifying needs and proposing best choices in terms of networking and security solutions Delivering technology presentations When needed, testing customer scenarios in our demo lab/environment (networking and security solutions, mainly Cisco and Fortinet)

 Understanding clients’ infrastructures, identifying needs and proposing best choices in terms of networking and security solutions Delivering technology presentations When needed, testing customer scenarios in our demo lab/environment (networking and security solutions, mainly Cisco and Fortinet)

 Conducting Ethical Hacking/Penetration Testing activities on web applications and IT/Networking infrastructures mainly for financial institutions using specific penetration testing tools (Nessus, WebInspect) and also manually trying to exploit identified vulnerabilities mainly in web applications/services Conducting Security Audits for ensuring compliance with standards mainly for financial institutions Proposing IT, networking and security architectures for large enterprise/public sector end users and delivering technical documentation for accessing funding and implementing the projects Testing scenarios and replicating relevant customer network segments in lab environment in order to better understand targeted infrastructure

 Teaching CCNA modules 1, 2, 3 and 4 classes Organizing and delivering technical presentations and hands-on labs for students Participated in organizing and delivering technical presentations/hands-on labs for Academy events

Master'S Degree - It Networks Security, Securing Complex It Networks

Bachelor'S Degree - It Engineer, Computer Science

Mathematics-Informatics, Intensive English