Avatar

Afgan Sharifov

Lead Information Security Specialist

Baku, Azerbaijan

afgan@sharifoff.com

+994773334647


Skills

Amazon Web Services (AWS)

Microservices, Docker, Kubernetes

IaC - Terraform, AWS CloudFormation

Source code management - GitHub, Git, AWS CodeCommit

CI/CD Pipeline - Jenkins, Bitbucket. GitLab, AWS CodeBuild, AWS CodePipeline, AWS CodeDeploy

Application security - SAST, DAST, SCA, RASP, Amazon Inspector

Continuous monitoring: ELK, Qradar, RSA Netwitness


Languages

Azerbaijani

English



Work Experience

Lead Information Security Specialist / Veyseloglu Group of Companies
Oct 2022 - Current
•Integrate information systems with SIEM - windows OS’s, Linux distros, routers, switches, azure cloud services, firewalls, XDR. Build rules, reports on SIEM. Monitoring daily endpoint activities.
•Data Loss Prevention (DLP): Configuring policies - file/folder classification, create dictionaries, configuring fingerprints, configuring Email DLP policies, configuring web DLP policies, creating discovery policies - mail discovery, file discovery. Monitoring DLP activities.
•Threat Intelligence (TI) – integrate corporate domains with TI, monitor leaked data into dark web and take actions about users, resources.
•Create Static web app with AWS services (S3, EC2, CloudFront, WAF, Route53)
•Create pipeline, integrate pipelines with version control services.
•Build web applications with AWS services.
•Build applications on serverless architecture.
•Secure web applications with the help of SAST, DAST, SCA, IAST, RASP tools.

Information Security Specialist / State Oil Fund of the Republic of Azerbaijan
Oct 2019 - Oct 2022
•Integrating information systems with SIEM - windows OS’s, Linux distros, routers, switches. Creating rules, reports, building dashboards on SIEM. Monitoring OS, network, database logs.
•Security Onion open source SIEM for monitoring.
•Built syslog-ng log servers/clients to collect/forward logs from Linux distros, network devices and forward to SIEM.
•IDS: Detecting malicious activities from Linux distros, network devices.
•Honeypots to evade attackers access to servers.

Help Desk / Neqsicahan Holding
Oct 2018 - Aug 2019
•Built websites from templates.
•Help end users to troubleshoot PC problems.
•Format PCs, configure printers, configure modems.
•Network cabeling

Full Stack Developer(Internship) / ATL Tech
Oct 2018 - Aug 2019
Built Real Estate web application on .Net framework backed with C#, database with Microsoft SQL, front with HTML, CSS, JavaScript.

Education

Baku Engineering University
Sep 2016 - Feb 2018

IT Management(MBA)