Aspiring SOC Analyst · ISC2 Certified in Cybersecurity (CC) · Open to OJT
Fourth-year BSIT (Information Security) · De La Salle Lipa · Philippines
Blue Team–focused Information Security student looking for a SOC Analyst / Cybersecurity OJT (internship). I learn by building lab environments, attacking them in a controlled way, and documenting what the detections caught — and what they missed.
- 🏆 1st Place, Best Capstone Project (Information Security Track) and 1st Place, Best Group Presentation — IT Colloquium '26–'27
- 🛡️ Deployed a live Security Onion monitoring platform for the MIS Office of Tanauan City Hall — 9.7M+ events indexed, 100% detection of simulated attacks
- 🧪 SOC Lab Mentee in the DysrupIT × De La Salle Lipa industry partnership
- 📚 Currently: Google Cybersecurity Certificate · next up: CompTIA Security+
| Project | What it shows |
|---|---|
| Security Onion SOC Handbook — Tanauan City Hall | Plain-language SOC user manual written for the capstone client |
| Security-Onion-Telegram-Alerting | ElastAlert 2 → Telegram Bot API alerting with MITRE ATT&CK-tagged rules |
| SOC-Incident-Writeups | 11 Tier 1 investigations (CVE-2024-3400, ToolShell CVE-2025-53770, Lumma Stealer…) |
| Wazuh-SIEM-Endpoint-Monitoring-Lab | Wazuh agent–manager, FIM, active response, custom XML rules |
| Nessus-Vulnerability-Assessment-Lab | Nessus scanning and remediation playbooks with before/after proof |
| Email-Header-Forensics-and-Authentication-Analysis | SPF, DKIM, DMARC and ARC analysis for phishing triage |
| Nmap-Network-Reconnaissance-Lab | Authorized recon, service enumeration and exposure assessment |
- SIEM & monitoring: Security Onion · Wazuh · Elastic Stack (Elasticsearch, Logstash, Kibana) · Suricata · Zeek · ElastAlert 2
- Endpoint & vulnerability: Sophos Central · Action1 RMM · Tenable Nessus · OpenVAS · Nmap · Hydra · Windows Sysinternals
- Systems: Windows · Linux · Active Directory · PowerShell · Proxmox VE
- Frameworks: NIST CSF 2.0 · MITRE ATT&CK · STRIDE · Philippine NCSP 2023–2028
ISC2 Certified in Cybersecurity (CC) · Appkademiya Certified Cybersecurity Professional (CCP) · Google Cybersecurity courses · Fortinet Threat Landscape 3.0 · Cisco Intro to Cybersecurity · 6 LetsDefend SOC badges
Open to SOC / cybersecurity OJT in the Philippines — on-site, hybrid or remote.