Position: Junior SOС Analyst
Category: Security
Experience: 1 years | English: intermediate

SOC analyst:
- Took part in 20+ incidents investigations;
- Provided detailed reports for major incidents

Incident Response experience:
- Participated 20+ incidents, either as a member of an incident response team or as the sole incident responder.
- Participated guidance to address and mitigate issues such as malware infections, website breaches, and DDoS attacks as a team member.
- Contributed to the resolution of unauthorized access and brute force/password spraying incidents as a team member.
- Developing and providing SOC reports.

SIEM experience:
- Playbook creation
- Offense handling and investigation
- AQL editing
- Performing searches for specific parameters among cybersecurity events upon request.
- Conducting historical analysis on cybersecurity events for new Indicators of Compromise (IOCs) upon request.
- Monitoring and controlling the status of event sources (Log Sources).
- Statistical analysis of cybersecurity events from event sources.
- Monitoring the operational status of SOC technical tools from an end-user perspective. Escalating identified issues, including user interface errors, anomalies in software product functionality, and data issues.

Monitoring and Control:
- Of system and security suite components (Continuous monitoring of Check Point security suite performance indicators. Real-time escalation of security suite incidents).
- Handling new Service Desk requests (Creating service requests for equipment unavailability).

Docker, Ubuntu:
- Working with Docker images, loading and unloading, creating Docker image, dockerfile

Cisco Packet Tracer:
- Creation of network topology
- Configuration of interfaces on PC

GNS3:
- Creating network booths
- Configure PC host adapters, configure Switch adapter
- Working with the virtual Juniper router, working with the image of the Juniper router, configuration of the Juniper router and management of configuration files 

Business analysis:
- Ability to Create Activity and Use Case Charts

Web-programming:
- Development of simple HTML page, creation of tables and forms with HTML
I am currently a first-year master's student at the Igor Sikorsky Kyiv Polytechnic Institute, specializing in the Institute of Telecommunication Systems (ITS). 
I have one year of experience working at IT Specialist as an SOC Analyst tier L1. In this role, I handled tasks such as :
- processing and registering client requests on the first line of technical support;
- detecting and analyzing cybersecurity incidents and breaches (SOC);
- Resolving IT system and information security tools maintenance tasks, including:
   - Monitoring and system status control,
   - Diagnosis and resolution of incidents;
- developing documentation and algorithms for automating IT and cybersecurity tasks;
- conducting training presentations.

My ambition is to continue my career in this field by transitioning to the role of SOC Analyst tier L2, where I can leverage my experience and skills to address more complex security and infrastructure challenges and contribute to the success of the company.
What I want:
- Conducting incident investigations using SIEM or other logging systems;
- Crafting queries (AQL, KQL) for intricate rules/logic, API requests;
- Pursuing educational opportunities, including courses related to the tools in use and general cybersecurity courses;
- Developing playbooks and utilizing alternative methods for automation.
What I do not wish for:
-Night shifts.