Сергій

KOZYR SERHII
Cybersecurity Specialist

[відкрити контакти](див. вище в блоці «контактна інформація») | [відкрити контакти](див. вище в блоці «контактна інформація») | Ukraine | Telegram - @serhii_kozyr8

SUMMARY
Cybersecurity Specialist with a developer background and 1+ year of experience securing iGaming infrastructure —
an environment where DDoS, fraud, and credential attacks are a daily reality, not theory. Proficient in monitoring and
analyzing security events using SIEM platforms, responding to incidents, and conducting vulnerability assessments.
Experienced with Wazuh, Datadog, Cloudflare, and AWS security services. Skilled in Linux/Windows administration,
network security, and threat intelligence frameworks. Committed to continuous professional growth and building
reliable, scalable security operations.

WORK EXPERIENCE
Security Analyst (1+ years) – Confidential
Monitor and analyze security events using SIEM platforms (Wazuh, Splunk, ELK Stack), correlating alerts
to detect real threats and reduce noise from false positives.
Support incident response activities including triage, investigation, evidence collection, timeline
reconstruction, and root cause analysis.
Configure, deploy, and fine-tune detection rules in Wazuh and Datadog
Administer and analyze security logs and WAF events in Cloudflare, investigating DDoS attempts, bot
activity, and suspicious traffic patterns.
Perform security monitoring and threat detection within AWS environments, reviewing CloudTrail logs,
GuardDuty findings, and Security Hub alerts.
Prepare detailed incident reports and recommendations for stakeholders.
Conduct vulnerability assessments using Nmap, Nessus, and Metasploit.
Document SOC processes, runbooks, and playbooks to support team knowledge transfer.
Java Software Developer (2 years) – SoftServe
Developed backend components using Java, integrated with ReactJS frontends and PostgreSQL
databases.
Contributed to database design, code reviews, and unit testing (JUnit); mentored junior developers.
Utilized CI/CD pipelines (GitHub Actions, Jenkins) and Docker for deployment

EDUCATION ADDITIONAL EDUCATION

Bachelor in Computer Science SoftServe IT Academy: Practical DevOps
Ivan Franko National University of Lviv SOC Level 1 / Level 2 — TryHackMe
Faculty of Electronics and computer technologies AWS Cloud Security — AWS Skill Builder (In
Computer Science Specialization Progress)

KEY SKILLS
SIEM & Monitoring: Wazuh, Splunk, ELK Stack (Elasticsearch, Logstash, Kibana), Grafana, Datadog
Cloud & Security Tools: AWS (CloudTrail, GuardDuty, Security Hub), Cloudflare (WAF, DDoS
protection), Docker
Network & Threat Analysis: Nmap, Wireshark, Nessus, Metasploit, Burp Suite, TCP/IP, OSI model, ports &
protocols, traffic analysis.
Frameworks & Standards: OWASP Top 10, MITRE ATT&CK, ISO 27001 / NIST, Incident Response
lifecycle, Vulnerability Management
Operating Systems: Linux (Ubuntu, Kali Linux), Windows Server administration
Development & Tools: Java, Python, Bash scripting, SQL, Git, Postman, CI/CD (GitHub Actions, Jenkins)