Денис

DENIS
HOLUB
JUNIOR SOCANALYST/
SOC L1 TRAINEE

Entry-level SOC Analyst focused on Windows security monitoring, basic SIEM
investigation and network event analysis. Hands-on practice with authentication events,
suspicious process activity, event correlation and simple attack timeline reconstruction.

CONTACT TECHNICAL SKILLS
SOC / Security Monitoring - basic alert triage, log analysis, event correlation, timeline
reconstruction and basic escalation decisions.
[відкрити контакти](див. вище в блоці «контактна інформація»)
Windows Security - Event IDs 4624, 4625, 4688; successful/failed logon analysis;
process creation; parent/child process relationships; basic PowerShell investigation.
[відкрити контакти](див. вище в блоці «контактна інформація»)
Networking - OSI and TCP/IP, TCP vs UDP, DNS, HTTP/HTTPS, RDP, SSH, SMB,
Telegram: @hiijiin source/destination IPs and ports, Firewall/NAT/VPN fundamentals.

SIEM / Splunk - basic searches and filtering; investigation by Event ID, username and
IP; time-based analysis and basic correlation of related events.

TOOLS MITRE ATT&CK - basic understanding of tactics and techniques; mapping suspicious
activity to T1110 Brute Force, T1078 Valid Accounts, T1059.001 PowerShell and T1021
Remote Services.

Splunk
Windows Event Viewer HANDS-ON PRACTICE
PowerShell SOC L1 Training Lab
Nmap
Investigated repeated failed authentication events followed by a successful login.
Burp Suite
Analyzed process creation and suspicious PowerShell activity after authentication.
Metasploit
Checked source IP, username, affected host, timestamps and related events.
SQLmap
Correlated authentication, process and network events to reconstruct simple attack
Kali Linux
timelines.
Mapped observed activity to relevant MITRE ATT&CK; techniques and practiced basic
LANGUAGES alert escalation.
Web Security / Penetration Testing Practice
Completed approximately 22% of PortSwigger Web Security Academy labs.
Ukrainian - Fluent
Practiced penetration testing against Metasploitable2.
English - A2 (improving Worked with Nmap, Burp Suite, Metasploit and SQLmap; familiar with OWASP Top 10
toward B1) concepts including SQLi, XSS, CSRF and SSRF.

EDUCATION & TRAINING
Self-directed cybersecurity training focused on SOC L1 operations, Windows security
monitoring, network fundamentals, SIEM/log analysis, MITRE ATT&CK and web security.

Junior SOC Analyst / SOC L1 Trainee