Dragoş Vasiloi Email & Phone Number

Bucharest, Romania

Bucharest, Romania

Conducts escalated cyber security incidents, exercising technical expertise and incident response skills as a key member of the Security Operations Center (SOC) & CSIRT. I’m handling complex security incidents, advance forensics and threat hunting activity. I'm providing the necessary expertise and consultancies to the SOC Tier1/2 teammates and I'm also creating and improving the SoP, Playbooks and Workflows for cyber security incident process and procedures.

Romania

Main activities and responsibilities as Team Manager:▪ Offering full support and technical knowledge expertise to ensure that team members can achieve the operational goals▪ Manage escalation from the team members▪ Create an inspiring team environment with an open communication culture▪ Coordinate day to day activity of team members ▪ Motivate team members▪ Discover training needs and provide coaching▪ Recognize high performance and reward accomplishments▪… Show more Main activities and responsibilities as Team Manager:▪ Offering full support and technical knowledge expertise to ensure that team members can achieve the operational goals▪ Manage escalation from the team members▪ Create an inspiring team environment with an open communication culture▪ Coordinate day to day activity of team members ▪ Motivate team members▪ Discover training needs and provide coaching▪ Recognize high performance and reward accomplishments▪ Responsible for direct reports (salary, absences, improvements, escalations, etc.)▪ Set individual objectives for direct reports▪ Plan and execute the strategy for skills development▪ Propose and implement promotions▪ Coordinate and assist analysts in daily work▪ Ensure capacity planning and OnCall shift rotation▪ Contribute to security best practices▪ Ensure needed tools, processes, activities▪ Ensure operational readiness of the Team▪ Lead technical QA escalationActing as wingman and backup for SDM:▪ Ensure delivery according to SOWs and client's expectations▪ Drive ITIL processes▪ Monitor KPI's▪ Ensure timely reporting and information supply to customers▪ Improve delivery processes▪ Conducting operations meeting with customers▪ Offering full support on Customer Onboarding Processes Show less

Romania

Working in MSSP environment* by handling complex security incidents, malware research, advance forensics and threat hunting activity. I’m directly responsible for security incident management process and improving other security solution process integration, risk management policy, information security risk treatment plan, information security policy, training/coaching program, technical proposals, service process and procedures. *(ISO 27001 and e-competence framework)-The most important… Show more Working in MSSP environment* by handling complex security incidents, malware research, advance forensics and threat hunting activity. I’m directly responsible for security incident management process and improving other security solution process integration, risk management policy, information security risk treatment plan, information security policy, training/coaching program, technical proposals, service process and procedures. *(ISO 27001 and e-competence framework)-The most important part of the job: acting as Security Incident Coordinator by managing the major incident overall, taking decisions and coordinating the cyber security incident team. Providing the necessary expertise and consultancies to the project manager to onboard new customers. Creating and improving the Playbooks and Workflows for cyber security incident process and procedures (from the plan that is based on company policy to SOAR implementation). -The most difficult but absolute necessary part of the job: Performing Quality Assurance Assessments on Cyber Security Incidents and providing the necessary feedback to the incident handlers.-The most interesting part of the job: Deliver technical consultancy to the customers as defined by project scope and to meet the customer expectations.-The most exciting part of the job: Coaching a new generation of cyber security analysts. To be in a core team that is defining the direction where and how the MSSP is moving on. Show less

Bucharest, Romania

Day to day tasks/attributions/activities/qualifications/responsibilities/objectives/rules and roles of the job:-Perform and coordinate technical cybersecurity investigations on security incidents, root cause analysis(RCA), recommend and mitigate the effects caused by an incidents.-Developing additional security layers and alerts based on SIEM logs.-Act as internal escalation point for L2/tier2 cybersecurity analysts.-Provide technical Incident Response guidance to cybersecurity… Show more Day to day tasks/attributions/activities/qualifications/responsibilities/objectives/rules and roles of the job:-Perform and coordinate technical cybersecurity investigations on security incidents, root cause analysis(RCA), recommend and mitigate the effects caused by an incidents.-Developing additional security layers and alerts based on SIEM logs.-Act as internal escalation point for L2/tier2 cybersecurity analysts.-Provide technical Incident Response guidance to cybersecurity analysts.-Manage creation and update Incident Response playbooks(runbook).-Identify best practices and continuously improve technical standards, processes, procedures, working instructions and guidelines to enable proper cyber risk mitigation. -Experience with more then 30 type of incidents and working with large number of cybersecurity tools, including SIEM(Splunk), SOAR(Paloalto XSOAR), Sandbox, honeypots, IDS/IPS and Endpoint detection & response solutions(CrowdStrike Falcon).-Correlate events(corroboration) from multiple sources during investigations.-Identifying gaps and develop/research/design proactive cyber security layers using MITRE ATT&CK framework and continuously improve the detection/analysis/disruption capabilities of the security tools/platforms/appliance. Show less

Tasks/attributions/activities/responsibilities/objectives of the job:-Incident Management Cyber Security in Security Operations Center (SOC L3) for Gas and Oil ICS / PCS / SCADA, IT Operations, Cloud Security, Cyber Defense Energy Industry.-Create Runbook/Playbook (Workflow for security incident handling process).-Provide training session/CoPs for interns/colleagues.-Proactive detection based on public/private IOC feeds.-End to End incident handling.-Fine tuning… Show more Tasks/attributions/activities/responsibilities/objectives of the job:-Incident Management Cyber Security in Security Operations Center (SOC L3) for Gas and Oil ICS / PCS / SCADA, IT Operations, Cloud Security, Cyber Defense Energy Industry.-Create Runbook/Playbook (Workflow for security incident handling process).-Provide training session/CoPs for interns/colleagues.-Proactive detection based on public/private IOC feeds.-End to End incident handling.-Fine tuning different event/incidents flows.-Create and submit advance recommendation technical/process incident response plan.-In-depth analysis root incident. -Power User Operator Splunk Security Information and Event Management (SIEM). Show less

Bucharest, Romania

Tasks/attributions/activities/responsibilities/objectives of the job:-Responsible for the security systems of the client and their adaptation based on current attacks.-Creates scripts and necessary reports to prevent computer damage and assess the impact.-Analyses security attacks and decides ways to solve them by configuring the informatics systems.-Possess adequate knowledge on operating systems (Windows, *nix), network technologies and protocols, scripting and programming… Show more Tasks/attributions/activities/responsibilities/objectives of the job:-Responsible for the security systems of the client and their adaptation based on current attacks.-Creates scripts and necessary reports to prevent computer damage and assess the impact.-Analyses security attacks and decides ways to solve them by configuring the informatics systems.-Possess adequate knowledge on operating systems (Windows, *nix), network technologies and protocols, scripting and programming languages, as well as the optimum deployment strategies for hardware / software security solutions.-Define, design, create, test, implement and modify informatics systems that have software as the main component in order to improve the security of informatics system.-Understand Client’s culture, security strategies, security goals, security objectives, security capabilities, and security budget.-Assist with Client’s change management processes and provides expert advice on existent problems.-Provide information security project management assistance to Client.-Work with Client to assist in escalations and coordinates the staff involved in order to resolve the security incidents.-Performs analyses activities in order to define specifications for creating an information system that will meet user requirements.-Compile various security reports.-Security Operations Center (SOC) L2. Show less

Chisianu

Implementing the CloudStack from bare metal servers to the full operational service as POC with documentations, working instructions and guides.Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Syslog analysis, monitoring BGP AS activities, Network segmentation with traffic control by Firewall/IDS/IPS, Infiniband Network (build and manage), link aggregation and load balancing network traffic L2-L4, network OS… Show more Implementing the CloudStack from bare metal servers to the full operational service as POC with documentations, working instructions and guides.Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Syslog analysis, monitoring BGP AS activities, Network segmentation with traffic control by Firewall/IDS/IPS, Infiniband Network (build and manage), link aggregation and load balancing network traffic L2-L4, network OS (CISCO IOS, OPNsense, RouterOS/Mikrotik), dynamic routing OSPF. Virtualization KVM / Qemu (Proxmox, CloudStack IaaS), Administration Windows AD (DC) / GPO, DNS, RemoteApp, RemoteFX, backup files. Software server monitoring (alert, report-backup, file-monitoring). Administration Linux (Debian, Ubuntu, CentOS) Setup firewall L2-L7, VPN (OpenVPN, L2TP site-to-site). CloudStack implementation IaaS, LDAP and RADIUS server authentication, BACULA backup-server with freeze FS on VM, GlusterFS with RDMA on Infiniband Network. Show less

Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Securing ICS(Industrial Control Systems), PCS(Process Control Systems). Network segmentation in VLANs (CISCO IOS, OPNsense, mikrotik), securing network with custom firewall/IDS/IPS rules ,dynamic routing OSPF, telephony SIP / IP -telephony (VOIP). Virtualization KVM / Qemu (Proxmox), Administration Windows AD (DC) / GPO, DNS,RemoteApp, RemoteFX, OS backup and OS… Show more Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Securing ICS(Industrial Control Systems), PCS(Process Control Systems). Network segmentation in VLANs (CISCO IOS, OPNsense, mikrotik), securing network with custom firewall/IDS/IPS rules ,dynamic routing OSPF, telephony SIP / IP -telephony (VOIP). Virtualization KVM / Qemu (Proxmox), Administration Windows AD (DC) / GPO, DNS,RemoteApp, RemoteFX, OS backup and OS hardening. Administration Linux (Debian / Ubuntu) hosting web and email(Apache, PHP, BIND (DNS),DHCP, NTP, proftpd TLS, MySQL, Samba, SSH, Cron, iptables software RAID (mdadm), Webmin,Proxy, NAS (Synology, OMV) sharing for NFS and SMB, additional OwnCloud and sharing filesWebDAV / HTTP/ HTTPS. systems monitoring site (Google Analytics / AWStats). Email server (Hosting Postfix / Dovecot / SquirrelMail / DKIM / SpamAssassin) with high level of credibility. Configure ACL/firewall L2-L4, VPN (L2TP site-to-site). Syslog collecting and log analysis. Show less

Hasselt (Belgium)

Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Securing ICS(Industrial Control Systems), PCS(Process Control Systems).Network segmentation in VLANs (CISCO IOS, OPNsense, mikrotik), securing network with custom firewall/IDS/IPS rules ,dynamic routing OSPF, telephony SIP / IP -telephony (VOIP). Virtualization KVM / Qemu (Proxmox), Administration Windows AD (DC) / GPO, DNS,RemoteApp, RemoteFX, OS backup and OS… Show more Tasks, rules, roles, activities, responsibilities, techniques, technologies, protocols, software, hardware and working methods: Securing ICS(Industrial Control Systems), PCS(Process Control Systems).Network segmentation in VLANs (CISCO IOS, OPNsense, mikrotik), securing network with custom firewall/IDS/IPS rules ,dynamic routing OSPF, telephony SIP / IP -telephony (VOIP). Virtualization KVM / Qemu (Proxmox), Administration Windows AD (DC) / GPO, DNS,RemoteApp, RemoteFX, OS backup and OS hardening. Administration Linux (Debian / Ubuntu) hosting web and email(Apache, PHP, BIND (DNS),DHCP, NTP, proftpd TLS, MySQL, Samba, SSH, Cron, iptables software RAID (mdadm), Webmin,Proxy, NAS (Synology, OMV) sharing for NFS and SMB, additional OwnCloud and sharing filesWebDAV / HTTP/ HTTPS. systems monitoring site (Google Analytics / AWStats). Email server (Hosting Postfix / Dovecot / SquirrelMail / DKIM / SpamAssassin) with high level of credibility. Configure ACL/firewall L2-L4, VPN (L2TP site-to-site). Syslog collecting and log analysis. Show less

Chisinau, Moldova

Securing and developing digital infrastructure. Administration of computers and computer networks, setting up, configuring, troubleshooting Software and Hardware (information retrieval from digital media). Administration with Windows operating systems (2k3, xp,2k8, 7, 8), MS Active Directory AD/GPO, linux-CentOS/Debian/Ubuntu and OS Hardening. Network segmentation and policy creation for each logical network layer with traffic passing through firewall/IDS/IPS with log alert. Implementation… Show more Securing and developing digital infrastructure. Administration of computers and computer networks, setting up, configuring, troubleshooting Software and Hardware (information retrieval from digital media). Administration with Windows operating systems (2k3, xp,2k8, 7, 8), MS Active Directory AD/GPO, linux-CentOS/Debian/Ubuntu and OS Hardening. Network segmentation and policy creation for each logical network layer with traffic passing through firewall/IDS/IPS with log alert. Implementation of cluster virtualization technologies Proxmox Cloud Cluster server, KVM-Qemu, NAS-Server, VPN, Broadcast Audio Streaming, Network Sound-decoder-encoder, web-server (CentOS) LAMP, serving Dell PowerEdge servers in the Cloud Data Center area with HA (high available) parameters. Linux systems administration (Apache, PHP, BIND(DNS), DHCP, NTP, ProFtpd, MySQL, Samba, SSH, Cron, Cron, IpTables, software RAID, Webmin). Implementation of Streaming Streaming/icecast/nginixnginx-rtmp-module (Video Streaming/Audio Streaming, HTTP/RTMP/HLS/VOD) systems under virtualization. Show less

Chișinău, Moldova

Securing and developing the digital infrastructure of the Radio Station "RadioPlai".Administration of computers and computer networks, setting, configuring, removing Software and Hardware faults (recovering information from digital media).OS Hardening, Network segmentation, Firewall/IDS/IPS implementation with customized policies for the company. Deploying Linux High Availability Cluster Servers, KVM-Qemu & libvirt, NAS-Server, VPN, Broadcast Audio Streaming, Network… Show more Securing and developing the digital infrastructure of the Radio Station "RadioPlai".Administration of computers and computer networks, setting, configuring, removing Software and Hardware faults (recovering information from digital media).OS Hardening, Network segmentation, Firewall/IDS/IPS implementation with customized policies for the company. Deploying Linux High Availability Cluster Servers, KVM-Qemu & libvirt, NAS-Server, VPN, Broadcast Audio Streaming, Network Sound-decoder-encoder, web-server(CentOS) LAMP, servicing Dell PowerEdge servers. Adjustment and setting of FM-processors, MIC-pre-amplifier, Sound-mixer, Broadcast FM software Synadyn, Administration of Linux systems (Apache, PHP, BIND(DNS), DHCP, NTP, ProFtpd, MySQL, Samba, SSH, Cron, Cron, IpTables, software RAID, Webmin). Control center for transmitting equipment in IED (intelligent electronic device) transmitting regions. Show less