Looking for a job

Simas Gražulis

@simasgraulis

Message

Senior Information Security Analyst who tuned SIEM detections and automated threat response at Mambu and Nasdaq.

Lithuania

Message

At Mambu, I configured SIEM detection rules and alerts against the MITRE ATT&CK framework, tuned false positives, and integrated threat intelligence feeds. I also automated connections between alert sources, SIEM, and ticketing systems, and assessed vulnerabilities to prioritize mitigations.

At Nasdaq and Western Union, I created and tuned detections, investigated incidents, and assessed security risks. Earlier, I applied the NIST Cybersecurity Framework to client projects at Baltic Assist and worked on SIEM monitoring, threat hunting, and vulnerability assessment at NRD Cyber Security.

Experience

Work history, roles, and key accomplishments

Security Analyst

Mambu

Dec 2025 - Sep 2026 (9 months)

- Configured and mapped SIEM detection rules and alerts according to the MITRE
ATT&CK framework to ensure comprehensive threat coverage.
- Performed continuous false positive (FP) tuning to refine rule accuracy and optimize
overall SOC alert efficiency.
- Integrated actionable Threat Intelligence feeds into SIEM platforms and security
telemetry sources to enhance proactive threat detecti

Senior Information Security Analyst

Nasdaq

May 2025 - Nov 2025 (6 months)

- Created custom detection rules and alerts across various log sources, performed
continuous false positive (FP) tuning, and led end-to-end incident investigations.
- Identified and assessed security risks within internal project infrastructure to
protect critical assets.
- Evaluated and improved the organization's overall security posture aligned with the
NIST Cybersecurity Framework.

Senior Information Security Analyst

Western Union

Sep 2021 - May 2025 (3 years 8 months)

Job Functions and experience with:

- SOC monitoring, Incident Management, and incident investigations
- Phishing email investigations and end user education on Security awareness
- Endpoint detections (AV, EDR)
- Network detections (IPS, IDS, Web proxy servers)
- Web application protection (WAF)
- Vulnerability management
- SSL certificate management
- Security information and event management (S

IT Risk Analyst

Baltic Assist

Nov 2020 - Aug 2021 (9 months)

- Identified and evaluated IT security risks across diverse applications and digital
solutions for multiple clients.
- Applied the NIST Cybersecurity Framework to assess and manage information
security risks across client projects.
- Uncovered potential system vulnerabilities and recommended tailored risk
mitigation measures to strengthen organizational security postures.

Cyber Security Analyst

NRD Cyber Security

Feb 2020 - Nov 2020 (9 months)

- Deploying, monitoring and configuring SIEM solutions
- Security incident analysis and threat hunting
- Network vulnerability detection and assessment
- Network traffic analysis
- Log management
- Developing mitigation and remediation plans as a result of vulnerability assessment findings

Network Operation Specialist

Danske Bank

Mar 2018 - Feb 2020 (1 year 11 months)

Team member of a network operation center. NOC is a first point of contact to support troubleshooting incidents in internal infrastucture.

Main responsibilities in a network operation center includes :

Participating in a solution of a network related incidents across the infrastructure.
Delivering various user request for a certain types of connections.
Monitoring overall network performance 24/

Intern

Telia Lietuva

Oct 2017 - Jan 2018 (3 months)

Intership was a part of my study program subject while being 4th year student at Vinius University. I was assigned to networking team which was responsible for deploying and troubleshooting virtual private networks.

Main role was to support a private networking lab for recreation of issues, which was encountered while troubleshooting.

Junior QA Tester

DocLogix

Jan 2017 - Jan 2018 (1 year)

As QA team member my responsibilities were :

Create well-structured test plans and test cases.
Perform primary testing of newly created features and versions of the software.
Review requirements, specifications and technical documents to provide timely and meaningful feedback along with bugs found