Sam Example
Junior SOC Analyst | Security+ | Splunk
sam.example@example.com | +971 50 000 0000 | Dubai, UAE | linkedin.com/in/sam-example | github.com/sam-example
Summary
Junior SOC analyst with 2 years in IT support and a Splunk home lab. CompTIA Security+ holder. Triages phishing and brute force alerts and writes a short incident note for the next shift.
Skills
- SIEM: Splunk, Wazuh
- Network: Wireshark, TCP/IP
- Scripting: Python, Bash
- Frameworks: MITRE ATT&CK
Certifications
- CompTIA Security+ (2025)
Projects
Home SOC lab (github.com/sam-example/soc-lab)
- Built a Splunk lab with 3 Windows hosts and 1 Linux host and wrote 8 detection rules mapped to MITRE ATT&CK T1110 and T1566
- Triaged 20 simulated brute force and phishing alerts and wrote one incident note for each, with the evidence and the escalation decision
- Scripted a Python parser for Wazuh alerts that cut the review time per alert from 6 minutes to 2 minutes
- Used Bash to rotate the lab logs every night and kept 30 days of data in Splunk for the review of each alert
TryHackMe SOC Level 1 path (github.com/sam-example/thm-notes)
- Completed 45 rooms in the path, including phishing analysis, Wireshark traffic analysis and Splunk basics
Experience
IT Support Technician, Example Telecom
Jan 2024 - Present
- Handled 30 tickets a week and reset access for 150 users in Active Directory
- Reviewed firewall and VPN logs after 3 account lockouts and reported the cause to the security team
- Documented the backup restore test and ran it with 4 colleagues every month
- Escalated 5 suspicious emails to the security team with the headers and the link, and 4 were confirmed as phishing
Education
BSc Computer Science, Example University
2019 - 2023
Languages
Arabic, English