Open to Junior SOC Analyst, Incident Response & Threat Intelligence roles

Damilola Adebisi Abiola

SOC Analyst — Threat Detection & Incident Response

I'm a SOC Analyst with hands-on experience in threat detection, incident response, and cloud security. I've built full SOC lab environments using Wazuh, Suricata, and AWS CloudTrail — simulating and detecting real attack techniques mapped to MITRE ATT&CK. I've investigated live phishing cases, correlated logs across Splunk and firewall systems, and contributed to automated AppSec pipelines that cut triage time by 97%. My path so far includes internships, team-based security labs, and the Google Cybersecurity Professional Certificate — and I'm now looking to bring that experience into a junior SOC or cloud security role.

01

Technical Skills

SIEM & IDS
  • Wazuh
  • Splunk
  • Suricata
Vulnerability Management
  • Lynis
  • UFW
  • OWASP ZAP
Cloud Security
  • AWS CloudTrail, S3, IAM, EC2
  • Docker
Phishing & Email Security
  • MXToolbox, VirusTotal
  • OTX, AbuseIPDB
  • SPF / DKIM / DMARC
Network Defense
  • iptables
  • Grafana
  • Wireshark
Frameworks & Scripting
  • MITRE ATT&CK
  • Python basics
02

Projects

Wazuh CloudTrail SOC Lab
Expadox Lab — Solo Project (Simulated Environment: FireOps Systems)
2026
  • Built a full SOC home lab: Wazuh SIEM (Manager, Indexer, Dashboard) on Docker, Suricata IDS, and AWS CloudTrail integration via S3.
  • Simulated and detected 7 attacks mapped to MITRE ATT&CK, including SSH brute force, privilege escalation, data exfiltration, port scanning, and AWS IAM/S3 abuse.
  • Built custom Wazuh SOC Analyst and Executive dashboards; authored an 8-step incident response playbook.
WazuhDockerSuricataAWS CloudTrailMITRE ATT&CK
Phishing Investigation & Incident Response
Cybersecurity Mentorship Programme, SOC
2026
  • Investigated a live phishing case impersonating Microsoft's account security team, confirming failed SPF/DKIM checks and an unpublished DMARC record via MXToolbox.
  • Identified and validated indicators of compromise using VirusTotal, AlienVault OTX, and AbuseIPDB, uncovering a reused phishing kit with 41 historical abuse reports.
  • Correlated proxy, firewall, and authentication logs in Splunk; delivered a full investigation lifecycle including report, containment plan, and executive presentation.
SplunkVirusTotalAbuseIPDBSPF/DKIM/DMARC
ShieldFlow — Automated AppSec Pipeline & SOAR Automation
Expadox Lab — Infrastructure Engineer, Team of 5
2026
  • Deployed and managed an AWS EC2 instance with Docker to host OWASP Juice Shop as the team's live vulnerable target application.
  • Built a 4-panel Grafana dashboard visualizing findings and Mean Time to Triage (MTTT) metrics in real time.
  • Contributed to a pipeline (Semgrep, Gitleaks, Trivy, OWASP ZAP, Shuffle SOAR) that achieved a 97% reduction in triage time — from 25 minutes to 45 seconds.
AWS EC2GrafanaSemgrepTrivyShuffle SOAR
SecOpsAI — Adversarial AI Detection Engineering Platform
Expadox Lab — SecOps, Pipeline & Observability Engineer, Team of 6
2026
  • Built a Python-based alert enrichment pipeline (VirusTotal, Shodan APIs) auto-appending IP reputation, open ports, and geolocation to alerts, with real-time Slack alerting.
  • Deployed Wazuh SIEM on Docker/Kali Linux for real-time monitoring of login anomalies, port changes, and host-level threats.
  • Developed an automated iptables IP containment script with audit logging; built a Grafana dashboard tracking Detection Rate, False Positive %, and Model Health.
PythonShodanWazuhKali LinuxGrafana
Vulnerability Assessment — Windows 10 Pro Environment
DecodeLabs — Cybersecurity Industrial Internship
2026
  • Performed a full vulnerability assessment on a live Windows 10 Pro environment via PowerShell, identifying an unencrypted drive and an end-of-support OS.
  • Documented remediation steps for the identified vulnerabilities.
PowerShellWindows 10Vulnerability Assessment
→ view repository
03

Education & Certifications

Education
  • Educational Psychology
    University of Nigeria, Nsukka
    2019
Certifications
  • Google Cybersecurity Professional Certificate
    Coursera
    2026
  • Networking Basics
    Cisco Networking Academy
    2026
  • Introduction to Cybersecurity
    Cisco Networking Academy
    2025