Святослав

SVIATOSLAV ANDRUSHCHENKO
Security Analyst (SOC / SIEM)
[open contact info](look above in the "contact info" section) [open contact info](look above in the "contact info" section) Starowislna 59, Krakow

ABOUT ME
Junior Cybersecurity Specialist with hands-on experience in SOC operations, SIEM (Splunk),
and endpoint security tools. Skilled in log analysis, threat detection, and custom SPL query
development. Experience in threat hunting, detection use case creation, and incident
triage.

EDUCATION
Bachelor’s degree
State University of Information and Communication Technologies (SUICT / DUIKT)
Bachelor’s Degree
Cybersecurity

WORK EXPERIENCE

Naftogaz Bezpeka (Largest oil industry company in Ukraine) | Oct 2024 - Mar 2026
SOC L1 Analyst
Monitored and analyzed security events using Splunk SIEM
Developed and optimized SPL queries for detection and investigation
Created and tuned detection use cases (e.g., brute-force detection using SPL and threshold-based
logic)
Investigated alerts and classified true positives / false positives
Performed IOC-based threat hunting using external APT reports and OSINT sources
Analyzed endpoint activity using SentinelOne, CrowdStrike, Microsoft Defender
Worked with logs from multiple sources (endpoint, system, security tools)
Investigated suspicious processes, user behavior, and network activity
Participated in incident triage and escalation to L2
Applied MITRE ATT&CK framework for threat classification and analysis

SKILLS
SIEM: Splunk (SPL queries, detection MITRE ATT&CK
logic) Networking fundamentals (TCP/IP,
EDR: SentinelOne, CrowdStrike,
ports, protocols, basic traffic analysis)
Microsoft Defender
Incident Response (triage, escalation)
Threat Detection & Threat Hunting
DLP fundamentals (data classification,
Log Analysis (endpoint, system,
security tools) policy logic)
Detection Engineering (basic level)