SOC Analyst Student - Threat Detection & Phishing

ADAM SAWAS

***********@*****.*** 951-***-**** West Covina, CA github.com/adamsawas10

SUMMARY

Aspiring SOC Analyst with hands-on experience in threat detection, SIEM operations, log analysis, and phishing investigation. Built and operated a Splunk home lab to detect brute-force attacks using Windows Security event logs. Experienced analyzing real-world phishing samples, extracting indicators of compromise, and documenting findings in structured incident triage reports. Currently pursuing CompTIA Network+ certification with Security+ as the next target. SECURITY PROJECTS

Splunk SIEM Home Lab: Brute-Force Detection

Tools: Splunk Enterprise, Windows Event Viewer, Python, SPL

- Ingested 618 Windows Security event logs into Splunk, wrote SPL correlation searches to detect brute- force login attempts via Event ID 4625, identifying 6 attack events

- Built a Security Monitoring dashboard in Splunk visualizing failed login patterns, attack timelines, and suspicious account activity

Phishing Email Analysis Lab

Tools: PhishTool, Any.run, Python

- Analyzed 15 real-world phishing samples, identifying 5 malicious emails through email header analysis, sender domain verification, IP reputation checks, and URL inspection

- Extracted IOCs including malicious IP addresses, spoofed domains, and credential harvesting URLs; documented findings in structured triage reports modeled on SOC analyst incident response workflows

- Built a Python script to automate email header parsing, detect spoofed domains, flag suspicious IPs, and identify malicious URL patterns

Network Attack Simulation and Detection Lab

Tools: Windows 11, Ubuntu Linux, Nmap, SMBclient, Python

- Built an isolated virtual lab environment, performed network reconnaissance using Nmap to identify exposed services, simulated brute-force attacks, and analyzed Windows Security event logs (Event IDs 4624 and 4625)

- Developed a Python log analysis script to automate detection of repeated failed login attempts and surface potential intrusion indicators

Active Directory Home Lab

Tools: Windows Server, Active Directory, VirtualBox

- Deployed a Windows Server domain controller, configured DNS, created user accounts and organizational units, and enforced Group Policy Objects across domain-joined machines WORK EXPERIENCE

Mt San Antonio College - AV and IT Support Associate Jan 2023 - Apr 2023

- Resolved 60+ support tickets across 40+ classrooms, troubleshooting hardware, connectivity, and AV issues for faculty and staff while escalating complex cases to senior technicians Skyline Travel - Dubai, UAE - Receptionist May 2018 - Jul 2019

- Managed 15-25 daily client interactions using a ticketing system; reduced processing time by 20% through organized documentation

EDUCATION

Cal State University Monterey Bay - B.S. Computer Science (In Progress) Jan 2026 - Present Mt San Antonio College - A.S. Computer Science GPA: 3.90 Aug 2023 - Dec 2025 CERTIFICATIONS

CompTIA Network+ - In Progress (Expected Summer 2026) TECHNICAL SKILLS

SIEM and Detection: Splunk, SPL queries, log ingestion, dashboard creation, Windows Event Log analysis, threat detection

Security Tools: Nmap, SMBclient, PhishTool, Any.run, IOC extraction, phishing triage, incident documentation

Networking: TCP/IP, DNS, IP configuration, network reconnaissance, port scanning, SMB enumeration Operating Systems: Windows 10/11, Linux Ubuntu

Programming: Python (log analysis, automation, header parsing), Java Other: Active Directory, Group Policy, ticketing systems, Zoom and Teams administration

Contact this candidate