Андрій

Andrii Nestor
Junior Cybersecurity Analyst
Open to: SOC Analyst · Security Administrator · Vulnerability Management · OSINT Analyst · GRC
Lviv, Ukraine · [відкрити контакти](див. вище в блоці «контактна інформація») · [відкрити контакти](див. вище в блоці «контактна інформація») · [відкрити контакти](див. вище в блоці «контактна інформація»)

PROFILE
Final-year Cybersecurity and Information Protection student at Lviv Polytechnic and co-author of two peer-
reviewed security articles. In university labs I investigated a simulated cloud incident in Google Cloud, scanned
and validated vulnerabilities with Nmap, Nessus and Metasploit, analyzed logs in Splunk and with Python,
researched organizations and people with OSINT tools, and audited security against ISO/IEC 27001. A
background in accounting helps me read financial reports when checking companies. I work independently,
document findings clearly, and can work with Ukrainian, English and Russian sources. Available for full-time
work.

TECHNICAL SKILLS

Security principles CIA triad, least privilege, defense in depth, MFA, security policies
Access control & IAM Authentication vs. authorization, user permissions, AAA, cloud IAM roles
Monitoring & IR Splunk (SIEM), Google Cloud Security Command Center, Cloud Logging,
Wireshark, alert triage
Vulnerability management Nmap/Zenmap, Nessus, Metasploit, searchsploit, Netcat
Web security OWASP Top 10, OWASP Juice Shop (in progress)
Network security TCP/IP, DNS, HTTP/HTTPS, firewalls, DMZ, ACLs, VPN, Port Security, SSH (Cisco)
Governance & risk ISO/IEC 27001, risk assessment, security audit, PDCA, Ukrainian data protection
law
Operating systems Linux (Kali) and Windows — permissions, processes, services, system logs
Scripting & development Python (pandas, Streamlit), SQL, PHP, Node.js
Cryptography PGP, digital signatures, hashing (SHA-1), symmetric encryption (Threefish)
OSINT & reconnaissance Google dorking, Maltego, theHarvester, SpiderFoot, Shodan, Censys, Whois,
WhatsMyName, Wayback Machine
Public registers Unified State Register (EDR), Court Decisions Register, asset declarations (NACP)
HANDS-ON EXPERIENCE
Cloud Security Incident Investigation 2026
Incident Investigation Technologies course
Simulated a malicious Owner role grant to an external account in Google Cloud
Triaged the Security Command Center alert “Persistence: IAM anomalous grant” and told it apart from
legitimate activity
Identified the initiator in Cloud Logging audit logs and revoked the access
Penetration Testing & Vulnerability Assessment Labs 2025–2026
Ethical Hacking and Network Security courses
Built a Kali Linux and Metasploitable 2 lab; detected open ports, service versions and OS with Nmap and
Metasploit db_nmap
Found a vulnerable FTP service by banner grabbing, matched it to a known exploit and confirmed root
access
Ran Nessus vulnerability scans, analyzed logs in Splunk and network traffic in Wireshark
Currently practicing OWASP Top 10 attacks on OWASP Juice Shop

OSINT Research 2025–2026
Ethical Hacking course labs and self-study
Researched an organization and its employees via social networks, advanced Google search and web
archives
Mapped external infrastructure and related entities with theHarvester, SpiderFoot, Maltego, Shodan and
Censys
Checked companies and individuals in Ukrainian public registers: EDR, court decisions, asset declarations
Information Security Audit 2026
Coursework
Audited a regional public authority's security management against ISO/IEC 27001: assets, access control,
incident handling
Built a risk register for a national postal operator: threats, vulnerabilities, impact and controls such as MFA
and DMARC/SPF
Security Log Analysis with Python 2025
Course labs
Wrote pandas scripts that flag brute-force attempts and IP addresses logging into three or more accounts
Secure Network Design 2025–2026
Coursework, Cisco Packet Tracer
Designed a segmented network with a DMZ, firewalls, ACLs and remote-access VPN; configured AAA, SSH
and Port Security
PUBLICATIONS
Sabodashko D., Ruda Kh., Oliiarnyk Yu., Nestor A. Analysis, Assessment, and Mitigation of Risks in Voice
Biometric Authentication Systems. Social Development and Security, 15(6), 2025.
doi.org/10.33445/sds.2025.15.6.27
Harasymchuk O., Oliiarnyk Yu., Nestor A. Psychological Methods of Fraud in Cyberspace and Ways to
Counter Them. Cybersecurity: Education, Science, Technique, No. 30, 2025. doi.org/10.28925/2663-
4023.2025.30.990

CERTIFICATES
Junior Cybersecurity Analyst Career Path — Cisco Networking Academy 2025
Incl. Network Defense, Endpoint Security, Cyber Threat Management
Introduction to Cybersecurity — Cisco Networking Academy 2025
Linux Basics — The Linux Foundation 2026
Internet Security During War — Prometheus 2026

EDUCATION
Bachelor's Degree — Cybersecurity and Information Protection 2023–2027 (expected)
Lviv Polytechnic National University
Junior Specialist — Accounting and Taxation 2020–2023
Khotyn Professional College · financial statements, tax reporting, business structures

LANGUAGES & SOFT SKILLS

Languages Ukrainian (native) · English (B1, Intermediate) · Russian (fluent)
Soft skills Analytical thinking · Attention to detail · Technical writing · Teamwork