Соломія

Solomiia Vorobel
SOC Analyst | Lviv, Ukraine
[open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | [open contact info](look above in the "contact info" section) | github.com/ughoh

Summary
SOC Analyst with a strong foundation in network protocols (TCP/IP, HTTP/S, DNS), AWS cloud fundamentals, and
security monitoring. Hands-on experience analyzing security events in Splunk Cloud SIEM, testing IDS/IPS rules, and
applying the MITRE ATT&CK framework. Proficient in web vulnerability assessment (OWASP Top 10), network
scanning (Nmap/Nessus), and configuring AWS security controls in controlled lab environments.

Technical Skills
Security Operations & Monitoring: Log Analysis (Splunk Cloud SIEM), IDS/IPS Rule Testing, Incident Handling
Basics, Threat Frameworks (MITRE ATT&CK, OWASP)
Cloud & Defensive Security: AWS Security Controls (IAM, CloudWatch, Infrastructure Defense), Network Security,
Log Analysis, Hardening Basics
Vulnerability Assessment & Pentest: Web Application Testing (OWASP Top 10), Network Scanning (Nmap,
Nessus, OpenVAS), Vulnerability Analysis, Privilege Escalation (Linux/SUID)
Security Tools & Utilities: Splunk, Wireshark, Burp Suite, Metasploit, Nmap, Nessus, OpenVAS, BeEF, SQLmap,
Ettercap, Hydra
Programming & Automation: Python, REST APIs (FastAPI), Database Tools (Alembic), Bash Scripting
DevOps & Infrastructure: Network Protocols (TCP/IP, HTTP/S, DNS), Docker, Docker Compose, Linux
Fundamentals, Kali Linux

Practical Experience & Projects
SoftServe Academy Lviv, Ukraine
Cybersecurity Intern 2026
– Performed system, network, and identity log analysis using Splunk Cloud SIEM to detect anomalies and access
issues.
– Investigated email threat scenarios and evaluated email security mechanisms (SPF/DKIM/DMARC) to mitigate
phishing risks.
– Configured AWS Identity and Access Management (IAM) policies and CloudWatch logging to enforce privilege
controls.
– Tested IDS/IPS detection rules and mapped network threat vectors using the MITRE ATT&CK framework.
– Assessed web application vulnerabilities (OWASP Top 10) to maintain infrastructure defense standards.
Network Administration & Security Labs | Wireshark, Burp, Nmap, Linux/Windows Academic Practice
– Analyzed network traffic with Wireshark to diagnose protocol behavior, DNS queries, and connectivity issues.
– Conducted network discovery and vulnerability scanning using Nmap and Nessus to maintain asset inventory.
– Evaluated web application risks (SQLi, XSS, Access Control) in labs using Burp Suite.
– Investigated system misconfigurations and user privilege escalation vectors across Linux environments.
Web API & Containerized Infrastructure Project | Python, FastAPI, Alembic, Docker Pet Project
– Developed a RESTful API with FastAPI and Alembic to practice database migrations and access control.
– Containerized application services and database dependencies using Docker and Docker Compose.
– Integrated authentication mechanisms (JWT tokens, password hashing) and documented IT configurations.

Education & Certifications
Lviv Polytechnic National University Lviv, Ukraine
Bachelor’s Degree in Cybersecurity (4th year student) Expected Graduation: 2027
Certifications & Badges:

• SoftServe Academy: Cybersecurity Internship Certificate | Verify
• AWS Academy: Cloud Security Foundations Badge | Verify
• Cisco Networking Academy: Networking Basics Certificate | Verify