IT Security Engineer

| Sky Express d.o.o Belgrade, IT Security Engineer '20 (currently) * Work with Airlock WAF * MSSP, providing 24x7 security service for Serbian government's web sites * Airlock WAF administration: adding new vhosts behind waf, configuring high availability mode, configuring allow and deny rules, accessing administration pages (wp- login, wp-admin, admin, cpanel...) from internal networks, blacklist filters etc. * Testing new vhosts by editing windows/linux hosts file and using web browser's developer tools * Troubleshooting and log analysis with Elasticsearch's Kibana * PKI (Public key infrastructure), SSL certificates (Let's Encrypt, SAN, Wildcard) * Basic knowledge and experience in writing regular expressions * Writing bash scripts to automate stuff (configuration and logs backups, cron jobs) * Implementation and administration of Carbon Black Defense new generation antivirus * Conducting network scans with Rapid7 vulnerability scanner * Basic experience with Avast antivirus, administration, log analysis and troubleshooting * Basic experience in conducting vulnerability assesments, penetration tests (black box and white box) and writing reports * Work with nessus, metasploit, burp suite, nmap, dirb, nikto, Shodan, gobuster, hydra, sqlmap and many other pentesting tools * Basic experience with Cisco ASA Firewall, vpn administration, editing access and nat rules * Work with Hyper-V 2019 and ESXi 6.7 * VMWare Carbon Black Defense Associate Analyst

Participated in corporate network administration (300 employees): *Providing network access for employees, according to corporate policy *Creating VPN accounts for new employees and defining access rules for them *USG 6000 series firewall administration cli/gui (firewall zones, security-policies, nat-policies, analyzing firewall session tables, analyzing traffic) *Network monitoring, using eSight, Huawei’s network monitoring software *Basic configuration of Huawei’s WLAN Controller *Basic experience with Fortigate firewalls, FortiOS 5.4, ipv4 policies, session lists, nat, port forwarding, basic configuration gui/cli *Monitor sessions, analyzing network traffic using Wireshark *L1-L7 troubleshooting of network problems *Testing devices and configurations in network lab Participated in network implementation for several companies in new building: *configuring switch-stacking, link aggregation, stp, vlans, core and access switches, access rules, remote access to network devices *logical separation of companies network traffic, by configuring different VRFs *configuring firewall zones, security and nat-policies, static routing, HSRP *installing network equipment into racks Participated in implementation of new MPLS network in SMATSA (Serbia and Montenegro Air Traffic Services): *conducting Factory Acceptance Tests (FAT) of network equipment *conducting Site Acceptance Tests (SAT) of network equipment *configuring MPLS PE and P routers (ospf, is-is, mpls ldp, bgp, l3vpns) *working with cisco asr903, asr9000 routers *working with cisco catalyst 3650 series switches *working with fiber equipment (SFPs, sc-pc, lc-pc cables) *CCNA (Cisco Certified Network Associate) Valid through February 3, 2022. *HCIP (Huawei Certified Internetwork Professional) Valid through April 22, 2022.

Administration of router-on-a-stick network (around 100 devices) Logical separation of computers into different VLANS, depending on the purpose Configuration and maintenance of port security rules on switches Configuration and maintenance of access lists on router Security measures implementation in the network (communication rules, physical security, shutting down unused interfaces etc.) Working with Cisco/TP-Link network equipment Periodical backup of network devices configuration Updating logical and physical network scheme L1/L2/L3 troubleshooting of network problems Active Directory administration (adding/deleting users, password policy, group membership) Mdaemon Mail server administration (adding/deleting users, password policy, searching and analyzing logs, troubleshooting mail delivery errors) Administration of ESET NOD32 antivirus software (installing new versions, implementing new updates, analyzing logs on Remote Administration Console, USB management, allowing using USBs with certain serial number on working stations, according to secrecy level) Working with virtual machines, VMWare Workstation 10, 12 Basic knowledge and experience with Microsoft SQL Server 2005 and databases (queries, backup, maintenance plan…) Providing overall IT support to employees