Krasimir Konov

GoDaddy / Sucuri — Remote

• · Lead advanced threat detection, vulnerability management, and incident response for websites and infrastructure across GoDaddy's hosting portfolio.
• · Personally resolve a high volume of malware-classification cases — the large majority requiring one or more original detection signatures.
• · Reverse-engineer newly discovered malware samples and develop technical detection signatures (PHP, JavaScript, regex); among the most active contributors org-wide to the team's core detection codebase.
• · Design and build CI/CD-style automation — GitHub workflows that trigger AWS Lambda functions to QA-test every new signature before it deploys across the scanner network.
• · Train AI agents to draft signatures for straightforward malware, publish original threat research to the GoDaddy and Sucuri blogs, and mentor junior analysts on triage and signature development.

GoDaddy / Sucuri — Remote

• · Handled forensic investigation of escalated security incidents, tracing attack vectors through log data and building the mitigation steps to close them.
• · Authored detection signatures in regex, PHP, and JavaScript; worked closely with engineering and incident-response counterparts to tighten classification processes ahead of moving into Engineer III three months later.

GoDaddy / Sucuri — Remote

• · Decoded and analyzed malware samples submitted by the wider analyst team, correlating indicators and behavior to produce regex/PHP/JS signatures used to detect and remediate infections at scale.
• · Investigated complex, novel infection chains — including fake plugins, PHP web shells, and JavaScript skimmers (Magecart-style) — and documented findings in published Labs Notes and blog posts.
• · Built detection coverage that scaled cleanup across large volumes of compromised WordPress and Magento websites over five and a half years in the role.

GoDaddy / Sucuri — Remote

• · Led a team of security analysts handling malware investigation and remediation for client websites, reviewing case quality and clearing escalations to keep resolution times inside SLA.
• · Ran team meetings and training, coordinated schedules, and served as the escalation point for the most complex or high-profile infections.

GoDaddy / Sucuri — Remote

• · Investigated and remediated malware infections on compromised client websites, repairing the functional damage left behind and advising clients directly on hardening steps to prevent reinfection.

Sucuri Inc. (prior to GoDaddy acquisition)

• · Cleaned malware from compromised websites, resolved the downstream damage, and flagged previously unseen threats to the wider team for deeper investigation and signature development.

HostGator — Houston, Texas

• · Investigated malware and phishing attacks reported by hosting clients, tracing attack vectors through server and access logs.
• · Monitored servers for spam abuse and worked directly with clients to guide remediation and blacklist removal.

HostGator — Houston, Texas

• · Supported a global hosting customer base on DNS, domain, and CMS issues across concurrent phone and chat channels — the troubleshooting foundation for the security work that followed.