CIS Benchmark-Based Endpoint Hardening
Implemented CIS Benchmark-aligned endpoint hardening for Windows and macOS environments, featuring audit controls and centralized patch management across systems.
About me
I am a Junior Cybersecurity Engineer with hands-on experience in SIEM/XDR, incident response, and detection engineering.
Currently, I manage and operate core security operations, collaborating closely with senior engineers, team leads, and stakeholders to investigate incidents and support infrastructure-level security decisions.
My primary focus lies in detection engineering, building secure automation workflows, and executing effective incident response strategies to protect corporate environments.
Languages: English (Fluent) · Estonian (Fluent) · Russian (Native)
Skills
Programming & Databases
Python
JavaScript
HTML/CSS
PostgreSQL
REST API
Git
PHP
MySQL
Cybersecurity
SIEM (Wazuh)
XDR (Cortex)
Threat & Vulnerability Management
Incident Response
YARA
SOAR
CVSS
CIS Benchmarks
MITRE ATT&CK
Cyber Kill Chain
Systems & Networking
Linux (Red Hat, Ubuntu)
Windows Server (AD, GPO, PowerShell, Hyper-V)
Azure Entra ID
Ansible
Cisco IOS
IPSec (Policy & Route-based)
VLANs/NAT/WAN/QoS
Cisco ASA
GLBP
Bash/CLI
Tools & Platforms
Wireshark
Nmap
Elastic Stack
Syslog
KnowBe4
VirusTotal API
Performance Monitor
Blockchain & Automation
n8n
LLM Integrations
Open-source Automation
Retrieval-augmented generation (RAG)
Smart Contracts
Node Deployment & Hardening
Portfolio
Wazuh SIEM/XDR
Built a robust SIEM/XDR platform using Wazuh, integrating custom YARA-based detection rules for advanced malware analysis and threat alerting.
PHP CLI Password Manager
Developed a secure, interactive command-line vault. Features libsodium encryption (Argon2id, XChaCha20-Poly1305), strict data validation, and Linux clipboard integration.
AI Sales Assistant
Developed a RAG-based chatbot with OpenAI API integration and automated backend workflows via n8n, coupled with a full-stack web application.
Orbital Signal Deception Planner
AI-based counter-SIGINT prototype that forecasts 24-hour satellite trajectories and generates rule-based deception tactics.
FinCheck — Personal Finance Tracker
Full-stack web app for budgeting, categorization, and charts with strong security controls against XSS and SQL injection.
Work experience
Junior Cybersecurity Engineer · Admirals Group AS
- Investigated and remediated security incidents utilizing Cortex XDR.
- Managed identity and access control using Microsoft Entra ID.
- Conducted application security reviews and vendor risk assessments aligned with internal security policies.
- Executed phishing simulation campaigns to improve corporate security awareness.
Junior Cybersecurity Engineer · Cybertex Security OÜ
- Progressed from an intern to a Junior Cybersecurity Engineer role, actively working on diverse cybersecurity projects.
Junior Software Developer · Saule IT Services OÜ
- Developed a PHP-based backend solution with secure data validation.
- Improved the legacy CAPTCHA implementation to enhance both security and user experience.
Cyber Security Intern · Cybertex Security OÜ
- Built a SIEM/XDR platform using Wazuh, deploying custom detection rules.
- Developed an AI assistant for sales and operations automation leveraging n8n, RAG, and OpenAI.
Operational Logistics Manager & Assistant Manager · Linkobalt
- Organized and coordinated international road transport within the EU and managed global logistics operations.
- Conducted compliance checks to ensure adherence to trade regulations, customs clearance, and export procedures.
- Contributed to operational process improvements and ensured cross-border regulatory compliance.
Education
Tallinn University of Technology (TalTech)
BSc Cyber Security Engineering
Certifications
CompTIA Cybersecurity Analyst (CySA+)
SC-900: Security, Compliance & Identity Fundamentals
EITCA/IS — Information Technologies Security Programme
CCNA: Enterprise Networking, Security & Automation
CCNA: Switching, Routing & Wireless Essentials
CCNA: Introduction to Networks
Red Hat System Administration I (RH124)
Red Hat System Administration II (RH134)
Security for Blockchain & DApps Specialization
Digital4Sustainability Learning Path
Contact
Let’s build secure and intelligent systems together.