ANETSYS

Security Engineer

• Administer and operate SIEM/SOC solutions: Elastic Security, Splunk, QRadar
• Monitor and analyze security logs: Elastic Agent, Beats, Rsyslog, Syslog-ng
• Administer and secure DNS infrastructures: Infoblox, BIND, DNSSEC, DNS Filtering
• Operate Firewall / Proxy / Web Security solutions: Fortinet, Palo Alto, Check Point, Blue Coat, Zscaler
• Analyze alerts and incidents using EDR/XDR solutions: CrowdStrike, Defender, SentinelOne
• Conduct network investigations with Wireshark, tcpdump, and Zeek
• Leverage Threat Intelligence with MISP and VirusTotal
• Develop and optimize detection rules using MITRE ATT&CK, Sigma, and YARA
• Automate security tasks with Python, Bash, and REST APIs
• Participate in the detection, investigation, and response to security incidents
• Contribute to the continuous improvement of security architecture and controls

Cybersecurity Expert