Павло

USTYMENKO PAVLO
CYBERSECURITY & INFRASTRUCTURE ENGINEER
[open contact info](look above in the "contact info" section)
[open contact info](look above in the "contact info" section)
Kyiv, Ukraine
Pavlo Ustymenko | LinkedIn
PROFILE SUMMARY
Cybersecurity and Infrastructure Engineer with experience in banking and enterprise environments. Focused on SIEM monitoring, incident response, access control, DLP, PAM, endpoint security, vulnerability management, WAF operations, and network segmentation. Experienced with enterprise platforms including IBM Guardium, Illumio, McAfee/Trellix, Symantec DLP, Radware, Tufin, F5 BIG-IP, Qualys, CyberArk, and Passwordstate. Strong background in Active Directory, Microsoft Entra ID, SCCM, Intune, Microsoft 365, Windows Server, and RHEL/Linux administration.
CORE SKILLS
Security Operations: SIEM monitoring, incident response, vulnerability management, risk analysis, security monitoring, access reviews
Security Platforms: IBM Guardium, Illumio, McAfee/Trellix, Symantec DLP, Radware, Tufin, F5 BIG-IP, Qualys, CyberArk, Passwordstate
Identity & Infrastructure: Active Directory, Microsoft Entra ID, IAM, PAM, SCCM, Intune, Microsoft 365, Windows Server, RHEL/Linux
Network & Application Security: Network segmentation, firewall policy analysis, Cisco AnyConnect, VPN, WAF, endpoint security
Administration: User lifecycle, access control, Group Policy, endpoint management, troubleshooting, documentation
Methods: ITIL 4, Agile, cross-team collaboration, audit support, remediation coordination
PROFESSIONAL EXPERIENCE
UKRSIBBANK BNP Paribas Group (L3)
2024 - Present
Lead Cybersecurity Engineer | Banking Sector

• Monitored SIEM alerts, investigated security events, and contributed to incident response.
• Maintained data protection and DLP controls using IBM Guardium and Symantec DLP.
• Supported endpoint protection, security policies, and threat prevention with McAfee Endpoint Security and Trellix.
• Managed privileged access and password-related processes using CyberArk and Passwordstate.
• Supported network segmentation and application security controls with Illumio and Radware.
• Reviewed and validated firewall policies and network access rules in Tufin.
• Managed and reviewed F5 BIG-IP security policies, investigated blocked traffic, and supported WAF-related incident analysis.
• Used Qualys to run vulnerability scans, analyze findings, prioritize remediation, and verify that vulnerabilities were addressed.
• Worked with infrastructure, network, and application teams to investigate security issues and coordinate remediation.
• Supported access reviews and security audit activities.
Quipu GmbH, Representative Office
2021 - 2024
System Administrator, L1-L2

• Administered Microsoft corporate infrastructure, including Active Directory, Microsoft Entra ID, SCCM, Microsoft 365, and Windows services.
• Managed user accounts, group memberships, access permissions, and endpoint configuration.
• Supported Microsoft Intune and corporate device management processes.
• Administered and supported Zscaler security solutions.
• Supported Cisco AnyConnect VPN and virtualization infrastructure.
• Investigated and resolved Windows, network, authentication, and access-related issues.
• Handled incidents and service requests through an enterprise ticketing system and escalated complex cases to internal teams and vendors.
• Maintained technical documentation, internal procedures, and knowledge base articles.
EARLIER EXPERIENCE
Support.ua
2019 - 2021
Technical Support Specialist, L1-L2

• Provided first-line technical support and remote troubleshooting for end users.
• Diagnosed and resolved hardware, software, operating system, and connectivity issues.
• Processed incidents and service requests using 1C.
• Performed equipment intake, inspection, testing, and technical evaluation.
• Helped users with device setup, software configuration, and common technical issues.
• Advised clients on IT services, maintenance, and available support options.
• Escalated complex cases to specialized technical teams and documented completed work.
ProCredit Bank
2018 - 2019
Junior Helpdesk Specialist, L1

• Provided first-line service desk support for corporate users.
• Resolved basic incidents and requests related to Windows, office applications, peripherals, and user access.
• Participated in hardware inventory, workstation deployment, and maintenance activities.
• Assisted with workstation setup, user onboarding, and basic account-related tasks.
• Escalated complex issues to system administrators and followed internal IT support procedures.
PROFESSIONAL TRAINING
• AZ-104: Microsoft Azure Administrator training.
• MD-102: Microsoft 365 Endpoint Administrator training.
• Windows Server 2016 Administration: Microsoft courses 20740, 20741, and 20742.
• Red Hat System Administration I/II (RH124 / RH134), in progress.
• ITIL 4 and Agile methodologies.
ADDITIONAL INFORMATION
Languages: Ukrainian - native; English - working proficiency.
Location: Kyiv, Ukraine. Open to hybrid and remote work.