Description

I help organizations improve security operations through detection engineering, incident response, SIEM/XDR operations, and security automation.

Currently working as a Cybersecurity Engineer at Admirals and Cybertex Security, where I investigate security incidents, manage detection and response workflows, support infrastructure security decisions, and collaborate with technical leads and stakeholders across the organization.

My experience includes:

- SIEM/XDR engineering and operations (Wazuh, Cortex XDR, Elastic Stack)

- Threat detection and incident response

- Identity and access security with Microsoft Entra ID

- Vulnerability management and endpoint hardening aligned with CIS Benchmarks

- Application security reviews and vendor risk assessments

- Security awareness initiatives, including phishing simulation and employee training campaigns

- Security automation using Python, PowerShell, Bash, APIs, n8n, and AI/LLM integrations

I also have a software development background, which helps me approach cybersecurity from an engineering and automation perspective rather than only operationally. I regularly build internal tooling, automate workflows, and work on practical security-focused solutions.

Outside of daily operations, I actively participate in cybersecurity and defence-tech hackathons focused on resilience, AI, infrastructure security, and emerging technologies.

Interested in:

Detection Engineering, SOC Operations, Security Automation • SIEM/XDR, Threat Hunting, Blue Teaming, AI-assisted Security Operations

Industry field of expertise

Languages

English
Fluent
Russian
Native or bilingual
Estonian
Fluent

Workplace preferences

Remote only

Primarily works remotely

Admirals Group AS
Cybersecurity Engineer
January 2026 - Today (7 months)
Working as a key Cybersecurity Engineer, reporting directly to the CISO. I collaborate closely with department heads and senior technical leads to secure the corporate infrastructure and guide security decisions.
- Technical Investigations: Conducted deep-dive investigations into diverse security cases. Analyzed varied telemetry and data sources, writing actionable technical reports to explain root causes to cross-functional teams (support, compliance) and C-level management.
- Incident Response, Threat Hunting: Executed incident response operations within the corporate environment, utilizing XDR solutions for advanced detection and remediation.
- Endpoint Security, Baselines: Engineered and planned the rollout of CIS Benchmark-aligned security baselines for Windows and macOS.
- Vulnerability Remediation: Streamlined patch management by developing automated scripting solutions for the secure, background deployment of critical security updates across endpoints.
- Compliance, Identity Security: Utilized Microsoft Entra ID telemetry for identity-based investigations and executed targeted IAM configurations. Evaluated software requests for security compliance, performed vendor due diligence, completed security questionnaires, and orchestrated company-wide phishing awareness campaigns.
Entra ID Cortex XDR SIEM Incident Response
Cybertex Security OÜ
Junior Cybersecurity Engineer
DIGITAL AND IT
December 2024 - Today (1 year and 8 months)
- Built SIEM/XDR infrastructure using Wazuh with automated incident response scenarios.
- Developed Al assistant for sales and operations automation (n8n, RAG, OpenAI).
SIEM Phishing Awareness Campaign
Saule IT Services OÜ
Junior Software Developer
DIGITAL AND IT
September 2025 - January 2026 (4 months)
- Developed a PHP-based backend with secure data validation and significant functionality updates to improve user experience.
- Implemented major database interactions and backend integrations.
- Improved CAPTCHA implementation for enhanced security and user experience.
Back-End development Database administration