SOC / Blue Team Junior |
Alert triage · log correlation · incident escalation · malware & network analysis
root@towhid:~$ whoami
SOC / Blue Team Junior
root@towhid:~$ cat specialties.txt
→ SOC & Blue Team Operations
→ Malware Analysis & Reverse Engineering
→ OT Security
→ Network Traffic Analysis
root@towhid:~$ _
SOC / Blue Team analyst focused on detection, triage, and incident response.
Recent M.Sc. graduate (IT & Security) with hands-on experience in SIEM alert triage, log correlation, threat hunting, and basic malware analysis.
Interested in SOC Analyst (L1/L2) roles where I can own alerts end-to-end, improve detection quality, and contribute to response playbooks.
Focus: IT & Security · Thesis: OT firmware vulnerability detection (reverse engineering)
Troubleshot industrial machinery (hardware + software), supported installs and preventive maintenance, delivered IT/user training, and tracked resolutions via CRM tickets to minimize downtime.
Full professional history available on LinkedIn
Short technical writeups on detection engineering, reverse engineering, and OT security—focused on methods, evidence, and lessons learned.
Automated CVE detection in OT firmware using signature-based and graph-based approaches. Detected CVE-2015-4590 (ArduinoJson buffer overflow) in STM32 L476RG firmware with 76.7% accuracy via YARA signatures extracted from Ghidra. Explored Control Flow Graph isomorphism for cross-architecture vulnerability detection across STM32 and ESP8266 builds.
Protocol analysis of ASSA ABLOY CLIQ lock: captured 1-Wire frames with logic analyzer, decoded pulse timings (13.66 µs = 0, 4.33 µs = 1), and identified critical authentication weaknesses. Full signal captures, CSV data, and decoder available on GitHub.
Alert triage, log correlation, incident escalation, basic threat hunting
Tools:
Static & dynamic analysis, behavior profiling, IOC extraction, malware classification
Tools:
Protocol analysis, detection of suspicious traffic, basic intrusion identification
Tools:
Firmware analysis, embedded protocol review, OT threat awareness
Tools:
Automation of security tasks, parsing logs, building small analysis tools
Tools:
TryHackMe
Ranked among the top 5% worldwide (December 2025)
Top PerformerLinkedIn Learning
Intermediate Proficiency
Coursera Project
Completed
LinkedIn Learning
Intermediate Proficiency
Coursera
Intermediate Proficiency
Coursera
Intermediate Proficiency
I'm currently looking for a Junior SOC Analyst / Blue Team role (L1/L2). I enjoy alert triage, log correlation, and writing clear investigation notes that help teams respond faster.
Cologne, Germany
Open to opportunities