09/21/2026 updated
100 % available
Senior Cybersecurity Consultant & SIEM Architecture Expert
Pardubice, Czech Republic
Only remote
Master of Business Administration (MBA), Information Systems Management – Kingston UniversityAbout me
I am a Cybersecurity Leader/ArcSight SIEM Expert with over 11 years of experience in cybersecurity/information security and 20+ years in IT operations. My passion is helping organizations strengthen their security posture by implementing and optimizing SIEM performance.
Security Operations & SIEM Architecture
Expertise in security operations and monitoring, SIEM architecture and implementation with platforms such as ArcSight (Micro Focus/OpenText), Microsoft Sentinel, Splunk and SOAR. Extensive experience conducting security operations reviews, identifying detection gaps, performance bottlenecks and improvement opportunities.
Threat Detection & Incident Investigation
Proven capability in threat detection, incident response and forensic investigations requiring deep database and log analysis. Development and review of incident response workflows, detection logic and operational playbooks for enterprise and government customers.
Oracle Database Engineering & Administration
Deep hands-on experience with Oracle Database environments, including Oracle Database 12c Data Guard Administrator Certified Professional and Oracle Certified Expert for Real Application Clusters 11g and Grid Infrastructure. Management of mission-critical databases (4 TB to 10+ TB) in high-availability environments, including backup, recovery, patching, and performance tuning.
Log Management & Correlation
Skilled in log management and correlation across large-scale enterprise environments, supporting both security and compliance requirements.
Playbooks, Workflows & Automation
Design and implementation of security playbooks, automated workflows and operational procedures to streamline incident response and reduce manual effort.
Cloud & Messaging Technologies
Practical knowledge of cloud and messaging platforms including Azure, Oracle Cloud, VMware, Kubernetes, and Apache Kafka.
Databases (PostgreSQL, MySQL, MongoDB)
Experience with multiple database technologies including PostgreSQL, MySQL, and MongoDB in addition to Oracle, supporting diverse enterprise environments.
Linux & Infrastructure Platforms
Certified SUSE Linux Administrator 12 and Red Hat Certified Engineer (RHCE), with hands-on experience on Linux, Windows Server, RHEL and SUSE platforms.
NetIQ Identity & Access Management
Certified in NetIQ Identity Manager Administrator, NetIQ Identity Manager Business Administrator, NetIQ Access Manager Business Administrator, NetIQ Identity Governance Business Administrator, and NetIQ Advanced Authentication Business Administrator.
Fortify Application Security
Knowledge of application security tools including Fortify Static Code Analyzer, ScanCentral, Fortify WebInspect, and ScanCentral DAST.
Customer Advisory & Executive Communication
Trusted advisor role for strategic enterprise and government customers, providing executive-level briefings and written reports summarizing security findings, risks, and remediation strategies.
Experience
Professional experience10+ years
Freelancer since2026
Languages
GermanBasic knowledgeEnglishFluentCzechNative speakerUkrainianNative speaker
Project history
Acting as a trusted cybersecurity advisor for strategic enterprise and government customers. Leading incident investigations, advanced troubleshooting, and root cause analysis. Conducting security operations reviews, identifying detection gaps, performance bottlenecks, and improvement opportunities. Developing and reviewing incident response workflows, detection logic, and operational playbooks. Providing executive-level briefings and written reports summarizing security findings, risks, and remediation strategies. Mentoring junior engineers and contributing to knowledge-sharing initiatives (KCS Expert). Supporting critical infrastructure and regulated environments with high security requirements.
Provided expert support for Oracle database environments powering large-scale ArcSight SIEM deployments. Supported incident response and forensic investigations requiring deep database analysis. Collaborated with Oracle Support and internal engineering teams to resolve complex incidents. Authored technical documentation and best practices for secure, resilient database-backed SIEM environments.
Delivered 24/7 production support for enterprise Oracle environments used by global financial and industrial organizations (e.g., Deutsche Bank, ABB). Managed mission-critical databases (4 TB to 10+ TB) in high-availability environments. Implemented backup, recovery, patching, and performance tuning. Supported development and security teams during incident response and system recovery scenarios.