Security Analyst | SOC Operations & Incident Response
I can start from zero and build from there. Show me where the fences are, and I'll fill the field until it's time to move them again.
Where I am today
- CompTIA Security+ certified
- Completed the Hack The Box Academy SOC Analyst path (CDSA exam in progress)
- Built and operate a full enterprise SOC simulation lab
The lab: Kali Linux attacker → pfSense with Snort IDS → Wazuh SIEM → DFIR-IRIS incident management → monitored Linux endpoint. I run attack simulations, triage the alerts they generate, and work each case from detection to closure in a real incident response platform.
Toolkit: Splunk · Elastic/Kibana · Wazuh · Wireshark · Snort · pfSense · Windows Event Log analysis · Active Directory · Threat hunting · DFIR · Malware analysis (static and dynamic) · Docker · Python
What I bring that most entry-level analysts don't
- Thirty years of hands-on technical practice, including field IT support across medical, veterinary, and commercial sites.
- Documentation discipline. I write incident notes the way I wrote grant proposals: clearly, accurately, for readers who need to act on them.
- Regulatory accuracy. I prepared weekly transaction reports to the U.S. Federal Reserve in a zero-tolerance environment.
- Bilingual communication in English and Spanish, and two decades of explaining complex things without jargon.
Theatre taught me the discipline that transfers most directly to a SOC: the show must go on, and it must be flawless.
Open to opportunities: SOC analyst and incident response roles.