Dipl.-Ing. Marsid Bicaku

Analyzing different security incidents for malicious behavior and attack pattern. Analyzing network vulnerabilities with Nessus, and web vulnerabilities with Burp Suite Designing and writing detection logic for in-house SIEM solution Further development & fine-tuning of sigma detection rules for better detection capabilities Whitelisting the detection rules to reduce False Positives results Automating different workflows with Python Consulting the customers how to respond to specific incident

Automating internal Cyber Defense Center workflows related to the used toolsets Developing tools with Python Maintaining Security Incident Response platforms like : TheHive & CORTEX Creating customize Analyzers & Responders Integrating Cortex’s Analyzers & Responders Creating python scrips to get alerts from SIEM systems like : QRadar, MISP, FireEye, WDATP and pushing those alerts into Security Incident Response platforms. Dockerizing different platforms like : Elasticsearch, Kibana, TheHive & Cortex

C#(MVC 5, Web API, WCF, Entity Framework, Linq) development Developing, maintaining and supporting web-based applications for corporate Intranet and application systems Developing website layout/UI by using standard HTML/CSS/JavaScript Responsible for designing, programming, deployment, testing and maintenance of applications using HTML5 /Javascript/JQuery/C# /Web Services/T-SQL technologies Creating server-side functionality using object oriented design principles

C\# (WebForm) development Developing website layout/UI by using standard HTML/CSS/JavaScript Design and creation of relational database schemas with SQL development Responsible for the development of applications by utilizing C\#

Installation/configuration of applications and services to improve the work of the administration Update IT infrastructure with latest hardware and security updates Daily interaction with vendors to resolve problems and update equipment Troubleshooting PC, laptop and mobile devices Regular testing of the various components to ensure they work at maximum efficiency Identification of appropriate solutions to customer needs Monitoring service delivery and customer satisfaction to maintain high standard service

Thesis: Cyber security setup to identify, classify and simulate cyber-attacks and address organization risks