Dimitar Bozhurski

Cyber security professional - currently employed as a Threat and Vulnerability Management Specialist at DXC Technology. I use the Qualys VMDR | CA | PC | GAV modules and carry out vulnerability scanning, map scanning, vulnerability research and help technical teams with remediations by supplying solutions and instructions. Motivated to learn new skills and gain more experience in this field.

Threat and Vulnerability Management Specialist at DXC Technology (2023 – Present)

Working with Qualys Platform - A security solution - Qualys | Qualys VMDR | Qualys CA | Qualys PC

• Qualys - Inventory Keeping - making sure that all assets are covered via the Agent/Network Scan
• Qualys - Troubleshooting Agents that are unable to connect to the platform (bad installation, network connectivity etc.)
• Qualys - Troubleshooting assets being scanned with the network scanner (bad connectivity, firewall blocking the traffic)
• Qualys - Vulnerability Scanning (agent and agentless)
• Qualys - Exporting and reading vulnerability reports (remediating, assisting with remediation)
• Reach out to various vendors (Qualys, Microsoft, Suse etc.) if they need help with remediation or collaborate with them on various topics.
• Qualys - Validate and confirm False Positives/ False Negatives (working with teams that own the assets). I often have to investigate when engineers and device owners are unable to locate a vulnerability, or treat it as a false positive
• Qualys - Validate Confirmed/Potential Vulnerabilities.
• Qualys - Policy Compliance scanning
• Qualys - Inventory Upkeep - making sure only assets that should be in Qualys are actually in Qualys (removing decommissioned assets to make the console more user friendly)
• Qualys - Vulnerability Management alongside my team (work using existing python scripts, I maintain the scripts and further develop VM on a smaller scale using Power Queries from reports)
• Response to 0-day vulnerabilities - immediate response with a structured plan (Scan, Report, Remediate, Collaborate)
• Experience in networking when troubleshooting scanner connectivity or agents not connecting/reporting with Qualys console. That includes configuration of the Qualys agent itself (server level) - Direct Connection/Proxy or collaborate with the Network team to allow communication on proxy/firewall side.
• Experience in Vulnerability Management creating reports based on preset requirements by our clients (e.g. what severity to include, send the reports to different technical/remediating teams and help in remediation if needed)

BSc (Hons) in Cyber Security – Anglia Ruskin University (2019 – 2022)