Алексей

ALEXEY KULIK
ABOUT ME
IT professional with practical experience in securing and managing infrastructure,
networking, and technical support. Skilled in troubleshooting, working under
pressure, and collaborating effectively in multicultural environments. Actively
building skills through homelabs, CTFs, and personal projects.
EDUCATION
[open contact info](look above in the "contact info" section)
Master of Software Engineering Mar 2025 - Present
[open contact info](look above in the "contact info" section) Vienna University of Technology
Vienna, 1190, Austria Master of Computer Engineering
Oct 2024 - Feb 2026
Dec 2003, Odessa, Ukraine Odessa National University of Technology
GitHub, LinkedIn, Website Bachelor of Computer Engineering
Odessa National University of Technology Sep 2019 - Jun 2024

EXPERIENCE
Cybersecurity Engineer July 2026 - Present
ZAM Energy Vienna, Austria
Hardened VPS infrastructure by configuring firewalls, implementing secure remote access (SSH/VPN), and
deploying monitoring solutions to strengthen system security.
Performed security assessments and vulnerability remediation for the company’s web and mobile applications,
ensuring secure APIs and data transmission.
Collaborated with engineering team to integrate security-by-design principles across IoT, web, and mobile components.
Established security and privacy policies, risk management guidelines, and operational standards to enforce
compliance.

IT Support & Event Manager Mar 2024 - Present
Austro-American Society (ÖAG) Vienna, Austria
Maintained the organization's website by publishing regular updates, identifying and submitting bug reports.
Provided on-site support during events in a multicultural environment, ensuring smooth execution and issue resolution.

Cybersecurity & Networking Technician Oct 2023 - Dec 2023
Odessa National University of Technology Odessa, Ukraine
Monitored and investigated security alerts/logs using Splunk; performed triage and analysis to prevent deviations and
support network quality.
Administered user accounts and RBAC in Active Directory, ensuring compliance and operational integrity.
Built and maintained secure LAN infrastructure across multiple labs, including routers, switches, and firewall policies.
Documented network topology and standard operating procedures, co-authored 4 knowledge base articles, simplifying
technical concepts, common issues, and highlighting the best cybersecurity and privacy practices for non-technical
users.

SKILLS
Security, Tools & Frameworks: SIEM (Splunk, Wazuh), IDS/IPS (Suricata), WAF, Nessus, Nmap, Wireshark,
Burp Suite, ISO 27001, MITRE ATT&CK, log analysis, alert triage.
Networking: Cisco (routers/switches), TCP/IP, LAN/VLAN, DNS, DHCP, NAT, OSPF, troubleshooting, firewall
policy, subnetting, pfSense, OpenVPN.
Infrastructure & Access Management: Active Directory (RBAC, user administration, group policy), hardware
configuration, Microsoft 365, VMware, VirtualBox.
Scripting, Automation & Cloud: Python, Bash, SQL, Git, Docker, AWS, Terraform, Ansible.
Operating Systems: Linux (Ubuntu, Debian, CentOS), Windows (workstation/server).
Languages: English (fluent), German (A2, improving), Russian (native), Ukrainian (native).

1/2

PROJECTS
NimDRAT (GitHub)
Developed a custom Command & Control (C2) framework in Nim leveraging Discord as a covert communication
infrastructure for research and adversary emulation.
Built remote access capabilities including dynamic system/hardware recon, shell execution with directory
tracking, process monitoring, file exfiltration, and visual capture (webcam/screenshots).
Architected a dual-agent C2 model (Runner agent & Watcher controller) featuring automated session
management, dynamic category sorting, and real-time heartbeat tracking.
Implemented AES-256 encrypted transit with ZIP compression and randomized metadata manifests to secure all
command execution traffic and exfiltrated data.
Integrated Windows Native TLS (WinHTTP/SChannel), producing zero-dependency standalone binaries with no
external DLL requirements.

Home SOC Lab
Designed and implemented a robust, multi-layered security architecture for a home network.
Deployed and configured pfSense firewall, WireGuard VPN, Suricata IDS/IPS.
Built centralized logging and alerting using Wazuh with log ingestion from network devices and endpoints.
Performed network segmentation using VLANs, isolating trusted, IoT devices, and guest traffic.
Built and deployed custom malware samples to evaluate the effectiveness of applied protections and Windows
Defender.

2/2