IT Support &
Cybersecurity
Professional

As part of a SOC team simulation, used Windows Event Viewer and CMD to identify a chain of events on a compromised system. Ascertained the incident timeline, compromised user account, and documented malicious activity in a summary report.

Evaluated three EDR products against an organization's business requirements. Mapped product capabilities to security needs using risk control mapping and recommended the best-fit solution based on detection accuracy and risk reduction.

Analyzed 5 suspicious emails to classify phishing attempts. Examined embedded external links for legitimacy using VirusTotal and documented findings identifying indicators of compromise in each email.

Examined vulnerability scan results across an organization's assets to assess the state of their Vulnerability Management program. Identified systems with the highest vulnerability counts, most critical issues, and oldest unpatched vulnerabilities.

Performed vulnerability scans on a target system using Nessus. Categorized findings by severity (Critical, High, Medium, Low) and produced a remediation report with actionable recommendations to reduce attack surface.

Researched the NotPetya ransomware attack on Maersk. Established the sequence of events and incident timeline, identified total assets infected, and composed a full Incident Report covering incident type, scope, timeline, and recovery status.

Used CyberChef (the Cyber Swiss Army Knife) to perform hashing, encryption, decryption, and cryptanalysis. Solved cryptographic puzzles using MD5, encoding/decoding techniques, and various cipher operations.

Tested ChatGPT, Google Gemini, and Microsoft Copilot for both offensive and defensive cybersecurity tasks. Explored AI capabilities around phishing simulation, keylogger awareness, and defensive security guidance.

Analyzed network packet captures containing HTTP and DNS traffic using Wireshark. Identified a 3-way TCP handshake, applied display and capture filters, and extracted credentials captured within attack traffic.

Examined Windows Firewall log files to detect malicious activity including port scanning attempts and suspicious single-port connections. Analyzed TCP flags and firewall events to identify and document threat patterns.

Configured security policies, NAT rules, and custom URL filtering objects on a Palo Alto VM-Series NGFW. Applied zone-based architecture and policy optimizations to improve network segmentation and control.

Analyzed an SSL certificate to identify certificate fingerprints, the certificate hierarchy, and the Certificate Revocation List (CRL). Examined certificate chaining and the role of Certificate Authorities in securing web infrastructure.

Analyzed WhatsApp's privacy policy against GDPR requirements across key areas: data security, retention, international transfers, cookie policy, and data subject rights. Produced a compliance assessment with evidence and clear reasoning for each category.

Created an ISO 27001:2022 audit checklist covering Data Security, Asset Management, and Risk Assessment. Developed five control questions per domain to evaluate an organization's compliance with the standard.

Pulled, dressed, and terminated Cat5e/6/6a/7/8 copper cabling in residential and commercial environments. Tested and certified cable runs using certification tools to verify performance and compliance — reducing downtime by 15%.

Deployed and configured a Zyxel USG FLEX 50H next-generation firewall from scratch in a personal homelab environment. Set up VLANs to segment network traffic, configured site-to-site and remote access VPN, and implemented NAT rules for traffic management. Performed ongoing network monitoring and troubleshooting to maintain uptime and connectivity continuity.

Configured a Cisco CBS350-16T-2G 16-port managed switch as the backbone of a personal homelab network. Set up and managed VLANs for network segmentation, configured port settings, and integrated the switch with the USG FLEX 50H firewall to create a fully segmented and monitored home network infrastructure.