Rostov-on-Don, , Russian Federation
Summary
Managed comprehensive internal IT infrastructure security, conducting vulnerability assessments and incident response to elevate overall protection and ensure compliance.
Highlights
Conducted comprehensive vulnerability assessments of internal IT infrastructure, identifying critical misconfigurations and security flaws to enhance system integrity and resilience.
Executed advanced penetration testing techniques, including NTLM hash interception via Windows network protocols (Responder, CrackMapExec, Impacket) and MITM attacks (mitm6), to simulate real-world threats.
Tested system resilience against Denial-of-Service attacks, performing HTTP flood simulations with HULK and GoldenEye, and communicated findings to IT and Information Security teams for mitigation strategies.
Played a key role in preparing infrastructure for PCI DSS certification audits, actively identifying vulnerabilities, overseeing remediation efforts, and conducting retests, directly contributing to compliance readiness.
Administered SIEM systems, investigating security incidents, generating detailed reports, and establishing new rules and asset groups, which elevated the infrastructure's security posture from 'medium' to 'high' as assessed by external auditors.