10/23/2025 updated
100 % available
Cybersecurity Engineer | Security Automation & Detection Engineering
Bucharest, Romania
Worldwide
Master of Engineering - Aerospace Engineering, Avionics and Aerospace NavigationAbout me
With almost 4 years in SOC operations and automation, I progressed from Cyber Security Analyst to Security Engineer, specializing in integrating SOC tools, developing playbooks, and incorporating threat intelligence sources in XSOAR within enterprise environments.
ResearchDomain ControllersApplication Programming Interfaces (APIs)Artificial IntelligenceAmazon Web ServicesAutomationComputer SecurityElasticsearchIncident ResponsePython (Programming Language)Machine LearningRequirements AnalysisSecurity Information and Event ManagementSystems IntegrationWorkstations
SOAR Security Automation
Proven expertise in developing XSOAR integrations, designing and implementing playbooks, and customizing dashboards to optimize SOC workflows and enhance automation capabilities.
SIEM and EDR Integration
Advanced skills in integrating different security tools including SIEM, EDR, and AI modules in SOAR platforms for comprehensive security monitoring and incident response
Cyber Threat Intelligence
Expertise in integrating threat intelligence sources in SOAR to stay up to date about emerging threats, tactics, and vulnerabilities, enriching investigations and improving detection capabilities
Elastic Stack Development
Proficient in designing and customizing Elastic detection use cases, dashboards and custom fields to improve visibility into alerts, firewall traffic, vulnerabilities, and endpoint activity
Machine Learning Integration
Experience building and tuning Elastic ML jobs and AI integrations for anomaly detection and advanced analytics
CrowdStrike Configuration
Skilled in CrowdStrike installation and setup, building detection rules, designing attack stories, and supporting Arcanna app/connector workflows
AWS Security Testing
Experience building malware testing labs in AWS with domain controllers and workstations to validate detections and test attack scenarios with Atomic Red Team
Incident Response Automation
Expertise in developing n8n workflows enabling automated incident response with Arcanna AI and building Slack bots for extending automation feedback loops
Experience
Professional experience0 - 5 years
Freelancer since2025
Languages
EnglishFluent
Project history
Contribute to the design, integration, and optimization of security automation and detection use cases across SOC teams and MSSPs. Focus on Arcanna integrations with Elastic, CrowdStrike, FortiSIEM, XSOAR, and others to enhance SOC efficiency and decision-making.
Implementing and developing security automation playbooks, jobs and scripts in SOAR to improve efficiency and response time of SOC team. Integrating threat intelligence sources and different security tools in SOAR. Performing incident triage and response, categorizing and prioritizing incidents based on risk and severity.
Ensure product/process development or industrialization in accordance with business rules and specifications adapted to its scope, in compliance with the regulations, the legal obligation of General Product Safety and the Renault Design. Ensure robustness of product/process design and provide technical support to designers, preparers, CAMI, logistics, quality analysis.