Daniyar Bekmuratov

Incident Response.

Investigation of incidents.

Integration of security systems.

Creating rules/controls.

Search for anomalies in the infrastructure.

Work to reduce false positives.

Threat Intelligence.

Conducting POC on different security systems.

Vulnerability management.

Research of new incoming threats.

Work on automating incident response.

Creating workflows.

Administration of the ELK Stack.

Creating configurations to collect logs for customers.

Creating correlation rules.

Incident Response.

Configuring systems for infrastructure monitoring.

Maintaining documentation.

Communication with customers.