Security Operation Analyst, Internship
Cydeo
01.2023 - 06.2023
- Managed day-to-day activities of the SOC team regarding Security Monitoring, Investigation, Incident Response, and Vulnerability Management.
- Experienced with Wireshark PCAP to import/export, remote capture, and apply various types of filters.
- Monitored networks using Splunk (SIEM Security Information Event Management) to detect malicious activity.
- Monitored network using Alien Vault (SIEM Information Event Management) to detect malicious activity.
- Detailed prepared briefings and reports of analysis methodology and results.
- Participated in regular Meetings such as Daily Stand-Up and Handover Meetings to discuss trends within the environment.
- Managed analysis to determine the legitimacy of files, domains, and emails using online OSINT tools such as Virus Total, Urlscan.io, and MX Toolbox.
