Open to opportunities

Filip Gontko

@filipgontko

Message

Lead Risk Analyst and cybersecurity professional blending security engineering, QA, and automation expertise.

Czechia

Message

What I'm looking for

I seek a hands-on security leadership role where I can build automation and detection capabilities, lead cross-functional teams, and strengthen risk and compliance programs.

I am a Lead Risk Analyst with broad experience across cybersecurity engineering, SOC leadership, QA, and security automation, having led cross-team efforts to improve Cyber Security and Privacy Risk Management at global companies. I have built tooling and proofs of concept using Python, Agentic AI, and cloud-native technologies while driving enterprise risk and compliance programs aligned with ISO standards.

I lead teams, present to executive stakeholders, and deliver measurable improvements in security posture through automation, detection engineering, and risk assessments. I thrive under pressure, collaborate across international teams, and apply a developer’s mindset to security operations and governance.

Experience

Work history, roles, and key accomplishments

Current

Lead Risk Analyst

Current

HERE Technologies

Jan 2022 - Present (4 years 1 month)

Leading and managing a team of cybersecurity professionals to reach yearly objectives and improve Cyber Security and Privacy Risk Management practices; developed automation and Agentic AI proofs of concept and lead monthly meetings with CISO and Trust leadership.

Python Java SQL Splunk IAM EDR Risk Management Agentic AI

SOC Team Lead

Oracle NetSuite

Jan 2020 - Jan 2022 (2 years)

Led a team of SOC analysts to analyze and triage logs, develop detections, and create SOC QA processes including Critical Assets Inventory and internal compliance auditing (SOX report).

Splunk Python OpenStack Log Analysis SOC Operations

IT Security Engineer

Republic NATO

Jan 2021 - Jun 2021 (5 months)

Integrated Nessus scan output into Splunk dashboards, produced Security Operating Procedures, and acted as technical contact for penetration testing during a six-month internship.

Nessus Splunk PowerShell SOPs Penetration Testing Security Operations

Junior QA Engineer

Avast Software

Jan 2018 - Jan 2020 (2 years)

Performed manual and automated testing of support pages and maintained Java code while improving Enterprise Risk Management practices and internal security and privacy controls aligned with ISO standards.

Java Manual Testing Automated Testing Git Jira Penetration Testing

Education

Degrees, certifications, and relevant coursework

Masaryk University

Bachelor of Computer Science, Computer Science

2016 - 2020

Activities and societies: Took advanced courses on security technologies; projects included integrating Nessus scans into Splunk dashboards, creating security tools, and SOC-related development.

Bachelor's degree in Computer Science with advanced courses in security technologies and practical work on IT security projects and tools.