Open to opportunities

Михаил Муравьев

@0004577

Message

I investigate incidents, hunt threats, and build efficient security monitoring pipelines.

Russian Federation

Message

What I'm looking for

I'm seeking an international cybersecurity role in SOC, DFIR, threat hunting, detection engineering, or network security, with relocation and visa sponsorship in Singapore, Japan, South Korea, or Taiwan.

At the Cyber Security Research Institute, I investigate enterprise security alerts using MaxPatrol SIEM and Kaspersky KUMA, supporting SOC L2 monitoring and incident response.

I've led forensic investigations across compromised Windows and Unix-like endpoints, scoped incidents, collected evidence, and developed threat-hunting queries for suspicious communications, anomalous network behavior, and malicious subnet activity.

I migrated real-time NetFlow analytics from ELK Stack to Akvorado, ClickHouse, and Grafana with custom integration scripts, reducing telemetry storage requirements by approximately 8–9x. I also tune PTAF WAF rules, analyze web attacks, monitor Suricata events, and maintain network security infrastructure.

I build practical security operations capabilities through T-Pot honeypots, Zabbix monitoring, automated backups, Python and Bash automation, secure code reviews, and Tier 1 analyst playbooks.

Experience

Work history, roles, and key accomplishments

Current

SOC & Security Engineer

Current

Cyber Security Research Institute

Feb 2025 - Present (1 year 6 months)

Investigated and triaged security alerts using MaxPatrol SIEM and Kaspersky KUMA, led forensic investigations of compromised endpoints, and migrated NetFlow analytics to Akvorado, ClickHouse, and Grafana, reducing storage requirements by 8-9x.