Daria Prokopeva

Experience

• 

  JTI (Japan Tobacco International)

  Feb 2015 - Apr 2021

  • Monitoring and analyzing of cyber security events like malware detections, potentially malicious activities detected by IDS, alerts and incidents raised by SIEM. • Tracking information about the software changes on corporate endpoints for potential security or policy violations, and responding to all such incidents.• Responsibility for the security incidents and making sure they are continuously monitored and reviewed.• Working with multiple teams and end-users to investigate potential security violations and report compliance issues, accordingly. Show less • Specialize in global infrastructure solutions and applications. • Support of globally located, multi-cultural and multi-lingual end-users. • Combine functions of primary customer contact point (making preliminary analysis, incident management, request dispatching) with in-depth problem analysis in the areas of their specialization, such as: Standard IT questions (Microsoft, standard customer hardware/software) JTI infrastructure solutions (IP telephony (Cisco, Avaya; Blackberry), iPass VPN, global networks etc.) Global business applications (such as Siebel Analytics, Siebel Consumer Goods, Symantec Enterprise Vault, Microsoft SharePoint, web applications etc.) SAP application Show less

  • System Security Operations Analyst

    Feb 2017 - Apr 2021

  • IT Analyst

    Feb 2015 - Feb 2017
• 

  BIOCAD

  May 2021 - Jan 2022

  Information Security Engineer

  • Identifying the potential vector of attacks, developing methods for the detection of attacks based on existing technological solutions.• Identifying and investigating information security incidents, creating recommendations to prevent incidents in the future, developing methods, tools and processes of response for information security incidents.• Setting the detection logic (filter false responses, configure correlation rules, etc.).• Design, implement and oversee multiple processes and procedures to identify company requirements in collaboration with security vendor/service provider.• Implementing solutions of the following classes: DLP, Threat Intelligence, SIEM, SOAR.• Maintaining security vendor/service provider relationships to ensure that service delivery and support meet performance and business objectives. Show less

• 

  AXA Group Operations

  Nov 2022 - now

  Operations Security Incident Officer