Sergey Zarubin

CEO

Hong Kong, Hong Kong17 yrs 6 mos experience

Highly Stable

Key Highlights

Over 14 years of experience in digital forensics.
Led incident response services across diverse industries.
Managed high-performing teams in cybersecurity.

Stackforce AI infers this person is a Cybersecurity expert specializing in Digital Forensics and Incident Response.

Contact

Skills

Core Skills

Digital ForensicsIncident ResponseCybersecurityEdiscoveryInformation Security

Other Skills

Business DevelopmentCCSPClient EngagementClient RelationsComputer Forensic InvestigationsComputer SecurityCrisis Response PlanningCyber DefenseCyber InvestigationsCyber Threat Hunting (CTH)Data Quality ControlData RecoveryDigital Media ExaminationE-Discovery ConsultingForensic Analysis

About

Digital Forensics and Incident Response Manager at KPMG's Forensic Technology practice in Hong Kong with over 14 years of experience in digital forensics, e-discovery, cyber incident response, and cyber security. Specialties: Digital Forensics, Cyber incident response, eDiscovery, Cyber Defense, Cyber investigations Certifications: CISSP, EnCE, CCSP, Relativity One, NUIX Forensic Tools: EnCase, X-Ways Forensics, ELK Stack/Elasticsearch, FTK Imager, Oxygen Mobile Detective, Magnet IEF / AXIOM, Wireshark, log2timeline, and other open source tools eDiscovery tools: Relativity, NUIX, Clearwell

Experience

Kpmg china

Cyber Incident Response, Digital Forensics, and eDiscovery Manager

Dec 2022 – Present · 3 yrs 3 mos · Hong Kong SAR · On-site

Incident Response: Delivered incident response services to clients across diverse industries, recommending immediate containment measures, conducting threat hunting, root cause analyses, and preparing detailed incident reports.
Vulnerability Assessments: Conducted numerous vulnerability assessments and cyber health checks, combining hands-on experience with a management perspective to identify and mitigate security risks effectively.
Project Management: Managed long-term forensic projects, ensuring effective oversight of project plans, budgets, and daily operations to align with company objectives and deadlines.
Digital Forensics and eDiscovery: Delivered digital forensics and eDiscovery projects by collecting electronic data from endpoint devices and servers, processing data in Nuix and Relativity platforms. Provided technical support for eDiscovery efforts, including preparation for data review, analysis, and production.

Incident ResponseThreat HuntingVulnerability AssessmentsProject ManagementDigital ForensicseDiscovery

Kpmg

DFIR and eDiscovery Team Lead, Senior Manager, Cybersecurity and Digital forensics

Oct 2013 – Dec 2022 · 9 yrs 2 mos · Moscow, Moscow City, Russia · On-site

Team Leadership: Managed a high-performing team of up to 8 forensic professionals, focusing on training and development in digital forensics and cybersecurity to enhance team capabilities and performance.
Project Oversight: Oversaw multiple long-term forensic projects, ensuring effective management of project plans, budgets, and daily operations to meet organizational goals and deadlines.
Forensic Investigations: Conducted comprehensive forensic investigations, utilizing advanced skills in digital evidence identification and preservation to support case resolutions.
IT Security Transformations: Led critical IT security transformations during corporate acquisitions, facilitating seamless integration of security protocols and practices.
Policy Review and Compliance: Reviewed and assessed clients' security policies and procedures, conducting ISO 27k gap analyses to identify compliance gaps and areas for improvement.
Crisis Response Planning: Developed and prepared enterprise crisis response playbooks, implementing robust data retention policies to enhance organizational resilience.

Team LeadershipForensic InvestigationsIT Security TransformationsPolicy ReviewCrisis Response PlanningDigital Forensics+1

Ernst & young

Manager, Forensic Technology and Discovery Services

Oct 2012 – Oct 2013 · 1 yr · Moscow, Moscow City, Russia

Developed and implemented a local eDiscovery and Review platform (based on NUIX) that provided hosted eDiscovery solutions to EY clients and their law firms. These solutions were used for litigation, compliance, and regulatory response.
Designed and implemented a secure remote solution that made it easy for people to access the eDiscovery platform. This allowed users to access the platform from anywhere.
Conducted and managed multiple computer forensic investigations. This included data quality control, data recovery (of both files and emails), and in-depth computer data analysis using a variety of industry-leading utilities and tools.

eDiscovery SolutionsComputer Forensic InvestigationsData Quality ControlData RecoveryeDiscoveryDigital Forensics

Pricewaterhousecoopers

Manager, Forensic Technology Solutions

Mar 2011 – Oct 2012 · 1 yr 7 mos

Developed and put into place standard operating policies and procedures for the PwC/Moscow Forensic Technology Solutions laboratory. This helped ensure consistent and efficient operations.
Acquired and preserved computer media for forensic purposes for different clients. I also conducted examinations of various digital media, including personal computers, servers, and flash/thumb drives. This allowed me to analyze digital evidence as part of investigations.
Interacted directly with clients and managed a team of three associates. I made sure that all client engagements were completed on time and within the established parameters. This required strong project management and communication skills.

Standard Operating ProceduresDigital Media ExaminationClient EngagementDigital Forensics

Mobile telesystems oao ("mts")

Corporate Information System Security Group Leader

Oct 2008 – Mar 2011 · 2 yrs 5 mos

Provided technical leadership to the company for the information security program. This involved guiding and overseeing the overall security strategy and initiatives.
Installed and maintained the security infrastructure, which included hardware security modules (HSM), secure authentication systems, log management, and security assessment tools. This helped ensure the company's systems and data were properly protected.
Drafted enterprise-wide security standards and guidelines for system configuration. This helped establish consistent and secure practices across the organization.
I performed security audits and vulnerability assessments, and created procedures for conducting these assessments on an ongoing basis. This allowed the company to identify and address security weaknesses in a systematic way.

Information Security ProgramSecurity InfrastructureSecurity AuditsVulnerability AssessmentsInformation Security