Cybersecurity Analyst | Security Operations | SOC, SIEM, Incident Response, Vulnerability Management | ISC2 CC | 10+ Years IT Experience
I work at the intersection of IT operations and cybersecurity. My background includes system administration, network support, technical troubleshooting, user access management, Windows/Linux administration, security policy implementation, and log review. I use that foundation to study and document practical security operations: what happened, what evidence supports it, what risk it creates, and what action should come next.
This GitHub is organized around three areas:
- Security operations evidence: SOC labs, SIEM detections, Windows Event Log analysis, Python triage scripts, and GRC documentation.
- Cybersecurity research notes: threat breakdowns, detection ideas, incident response thinking, and vulnerability/risk review.
- Study guides: structured certification notes for CompTIA Security+ SY0-701, Google Cybersecurity, and ISC2 CC.
| Area | Repository | What It Shows |
|---|---|---|
| Study Hub | Cybersecurity Study Guides | Central hub for cybersecurity certification notes, study roadmap, glossary, quick references, and review checklists |
| Security Research | Cybersecurity Research | Threat research methodology, vulnerability review structure, detection note templates, and incident-response thinking |
| Security+ Notes | CompTIA Security+ SY0-701 | Exam-objective study notes covering threats, vulnerabilities, architecture, IAM, GRC, security operations, and incident response |
| Practical SOC Work | Cybersecurity Portfolio | Hands-on SOC labs, SIEM detections, Windows log analysis, Python automation, vulnerability review, and GRC evidence |
| Google Certificate Notes | Google Cybersecurity | Module-wise study notes for foundations, risk, networks, Linux, SQL, assets, detection, Python, and security readiness |
| ISC2 CC Notes | ISC2 CC Study Guide | Domain-wise CC notes for security principles, BC/DR/IR, access controls, network security, and security operations |
| Work Area | Evidence |
|---|---|
| Windows Event Log Analysis | Authentication event review and Event ID 4624/4625 investigation notes |
| Detection Engineering | Failed logon followed by successful logon detection using SPL, KQL, and Sigma-style logic |
| Threat Research Process | Research methodology and writeup templates for threat, vulnerability, and detection notes |
| Security Automation | Python log triage tool for repeatable authentication-event review |
| GRC and Risk | Security policy, risk register, and control mapping documentation |
| Study Material Design | Cybersecurity roadmap, glossary, IR cheat sheet, SIEM query plan, and review checklists |
I study current cybersecurity incidents and translate them into practical detection and response notes. My focus is on connecting threat activity with analyst thinking: logs to check, indicators to validate, likely impact, containment steps, and lessons for prevention.
Current focus areas:
- Threat intelligence and incident breakdowns
- SOC alert triage and investigation workflows
- Windows authentication events and logon behavior
- SIEM detection logic using SPL, KQL, and Sigma-style structure
- Vulnerability management, risk rating, remediation, and retesting
- Access control, MFA, least privilege, and privileged account review
- Network security, DNS, HTTPS/TLS, Zeek-style review, and outbound connection analysis
- Security governance, policy writing, risk registers, and control communication
| Category | Tools and Concepts |
|---|---|
| Security Operations | SOC monitoring, alert triage, incident response, evidence timelines, investigation notes |
| SIEM and Detection | Splunk, KQL, Microsoft Sentinel, Wazuh, Elastic, Sigma-style logic, MITRE ATT&CK |
| Systems and Logs | Windows Event Logs, Linux, PowerShell, Python, SQL, authentication events, endpoint review |
| Network Security | Wireshark, Zeek, Nmap, DNS, HTTPS/TLS, firewall logs, repeated outbound connection analysis |
| Risk and GRC | NIST CSF, policy writing, risk register, control mapping, vulnerability management |
| Cloud Fundamentals | AWS, Google Cloud, Azure security fundamentals, IAM, logging, secure configuration |
| Role | Organization | Period | Location |
|---|---|---|---|
| IT Administrator | RainCity Property Maintenance | Dec 2022 - Present | Greater Vancouver Metropolitan Area |
| System Administrator | Worldwide Cloud Solutions | Oct 2017 - Nov 2022 | Mangaluru, India |
| IT Support Specialist | United Planets Enterprises | May 2013 - Sep 2017 | Masqat, Oman |
| Jr Assistant | Manappuram Finance Limited | Jul 2010 - Dec 2012 | India |
| Application Support | Natural Farms | Jan 2012 - Apr 2012 | Mangaluru, India |
| Credential | Status |
|---|---|
| ISC2 Certified in Cybersecurity (CC) | 2025 |
| SOC Bootcamp, Thinkcloudly | 2026 |
| Google Foundations of Cybersecurity | 2024 |
| Google IT Support | Completed |
| Cloud Computing, NPTEL - IIT Kharagpur | 2019 |
| CompTIA Security+ SY0-701 | In progress |
- Expanding security research writeups into concise detection-and-response notes
- Improving SOC labs with screenshots, logs, timelines, and analyst conclusions
- Maintaining cybersecurity study guides as structured, easy-to-review learning material
- Building practical Python and PowerShell automation for repeatable security review tasks
- Email: wilsonvijaysequeira@gmail.com
- LinkedIn: wilsonvsequeira
- GitHub: wilsonvs