Open to opportunities

Artem Fedulov

@artemfedulov

Message

Senior information security leader building SOC capabilities and incident detection.

Kazakhstan

Message

What I'm looking for

I’m looking for a SOC/infosec role (hybrid/remote OK) where I can build detection and monitoring from scratch, lead analysts, run end-to-end incident response, and work on defense-in-depth for industrial/ICS-OT environments.

I have 9+ years in IT and information security, with a focus on building and scaling SOC capabilities. I led a SOC team of 20+ analysts, built monitoring processes from the ground up, and developed 50–100 correlation rules and detection use cases. I also conducted security audits across 7 industrial enterprises of ERG Group in 5 cities.

In my current role, I built SOC processes from scratch and manage L1–L3 analysts, ran full-scale compromise assessment, and repelled targeted APT attacks by blocking lateral/vertical movement and data exfiltration channels. I deploy defense-in-depth controls (segmentation, policies, privilege minimization) and develop incident response playbooks covering 15+ incident types. I’m also the author of open-source SOC/DFIR tools published under the ZavetSec brand (github.com/zavetsec) and have experience with Wazuh SIEM, IBM QRadar, and Microsoft Defender for Enterprise for ICS/OT.

Experience

Work history, roles, and key accomplishments

Current

Head of SOC Department

Current

Department Confidential

Nov 2024 - Present (1 year 8 months)

Built SOC processes from scratch and manages a team of 20+ operators and L1–L3 analysts. Led compromise assessment and countered targeted APT activity, deploying SIEM monitoring with Wazuh and correlation rule/detection use case development.

SOC Security Monitoring SIEM Wazuh Correlation Rules Detection Engineering Incident Response Compromise Assessments Vertical Movement Prevention

Chief Information Security Specialist

JSC Altynalmas

Jan 2024 - Oct 2024 (9 months)

Managed end-to-end information security incident detection, investigation, forensics, evidence collection, and post-mortem analysis. Secured ICS/OT perimeter through IDS administration and segmentation, and performed audits and penetration testing with Nessus and nmap while administering IBM QRadar SIEM and Defender for Enterprise (ICS/OT).

Incident Response Digital Forensics IBM QRadar SIEM Correlation Rules IDS OT IT Segmentation Penetration Testing Nessus Nmap Privileged Access Management (PAM)ACLs Security Auditing

Information Security Engineer

Business Technology Services LLP

Aug 2021 - Jan 2024 (2 years 5 months)

Provided information security incident response for ICS/OT environments and advised industrial enterprises on reducing ICS/OT security risk. Conducted ICS/OT security compliance audits across ERG Group sites, deployed IDS sensors, configured industrial network security, supported vulnerability scanning, and built ics-cert.kz with e-learning and phishing-simulation awareness programs.

ICS OT Security Incident Response Security Auditing Vulnerability Scanning Nessus ScanOVAL Nmap Backup And Recovery Security Awareness Training

System Administrator

Rudny City Hospital (Municipal State Enterprise)

Sep 2018 - Oct 2019 (1 year 1 month)

Handled server administration, network configuration, and information security duties for a municipal state enterprise. Also supported government portal-related tasks and performed related hardware repair.

Server Administration

IT Engineer

Rudnysokolovstroy JSC

Jul 2015 - Aug 2018 (3 years 1 month)

Managed server infrastructure and supported general systems administration. Worked with a government procurement portal as part of daily IT operations.

Systems Administration Server Infrastructure Management