# Benja User

Benja User is a remote worker on Himalayas, Analista de Ciberseguridad Jr at SOC / CDC Nivel I, based in Argentina.

Source: https://himalayas.app/@benjauser

```text
Junior cybersecurity analyst building a SOC lab with Splunk, Suricata, and eight MITRE ATT&CK detections.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Argentina |
| Authorized to work in | Argentina |
| Salary expectations | 30k+ USD |
| Job categories | Cybersecurity Analyst, SOC Analyst |
| Skills | Security Events And Logs Analysis, Security Alert Triage, Incident Escalation, Incident Management, Splunk, SPL, Sigma, MITRE ATT&CK, Suricata, The Hive, Cortex, MISP, Wazuh, ELK, KQL |
| Portfolio | https://portfolio-vandallco.vercel.app |
| GitHub | https://github.com/vandallco |

## What I'm looking for

```text
I'm seeking a Level I SOC role with a 15:00–23:00, 5x2 schedule, and availability for contingency coverage.
```

## About

```text
I designed and implemented a SOC lab with Splunk, Suricata, TheHive, Cortex, and MISP. It reflects my training in Level I security event analysis, alert classification, escalation, incident follow-up, and shift documentation.

For the lab, I developed eight Splunk and Sigma detections mapped to MITRE ATT&CK and assigned severity to support triage. I documented the incident lifecycle in TheHive and wrote three incident reports.

I also wrote five response playbooks with escalation criteria based on severity, along with an analyst operations manual. My certifications include TryHackMe Security Analyst Level 1 (SAL1) and Cyber Security 101 (SEC1).

On Log Sentinel, I built a browser-based log analyzer that detects brute force, suspicious access, and port scans, with six Level I triage training scenarios. I also developed Kali MCP, a Python server that lets an AI agent operate a Kali VM with token authentication, command allowlisting, and audit logging.
```

## Experience

### Analista de Ciberseguridad Jr

SOC / CDC Nivel I

```text
Analista de ciberseguridad de nivel junior en un centro de ciberdefensa, responsable de analizar eventos de seguridad, clasificar alertas por criticidad, escalar incidentes y documentar turnos.
```

Skills: Splunk, Suricata, The-Hive, Cortex, MISP, MITRE-ATT&CK, NIST-SP-800-61-Incident-Handling-Guide, ITIL, Análisis-De-Eventos, Alert-Classification, Escalamiento-De-Incidentes, Documentation

## Education

### Universidad Católica de Salta

Técnico en Seguridad Informática, Information Security. 2024 - 2026

```text
Completed a technical degree in Information Security from Universidad Católica de Salta, covering cybersecurity fundamentals and SOC operations.
```

### TryHackMe

Cyber Security 101 (SEC1), Cybersecurity

```text
Earned the Cyber Security 101 (SEC1) certification from TryHackMe in July 2026.
```

### TryHackMe

Security Analyst Level 1 (SAL1), Cybersecurity

```text
Earned the Security Analyst Level 1 (SAL1) certification from TryHackMe in 2026.
```

### Accenture

Infrastructure & Operations Fundamentals, IT Infrastructure

```text
Completed the Infrastructure & Operations Fundamentals training at Accenture in 2025.
```

### Accenture

Capacitación Help Desk, IT Support

```text
Completed Help Desk training at Accenture, covering IT infrastructure, ITIL 4, ticket lifecycle, SLAs, and escalation procedures.
```

## Tech stack

- Splunk
- Stellar
- Next.js
- Python
- PowerShell
- ELK
- Wireshark
- Linux
- Kali Linux
- The Hive
- TypeScript
- Docker
- Nmap
- Supabase
- Bash
- Wazuh
- Suricata

To contact Benja, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Bautista Oliveros](https://himalayas.app/@bautistaoliveros): Analista de Seguridad, Informe Médico
- [Jeremias Castro](https://himalayas.app/@jeremiascastro): Desarrollador en Automatización, AlterMundi
- [Charlotte IBAÑEZ](https://himalayas.app/@charlotteibanez): SOC Analyst Intern, Sopra Steria
- [Joel A Portales](https://himalayas.app/@joelaportales): Soporte Técnico N2 / Infraestructura & Ciberseguridad, REBA
- [Lucas Godoy](https://himalayas.app/@lucasgodoy1): Analista de ciberseguridad, Freelance
- [Lautaro User](https://himalayas.app/@lautarouser2): SOC Operations Simulations, LetsDefend
- [Ezequiel Ardiles](https://himalayas.app/@ezequielardiles): Junior Security Analyst, Verus Cybersecurity
- [Felipe Alborch de Guzman](https://himalayas.app/@felipealborchdeguzma): Analista de Ciberseguridad, Accusys Technology
- [Gianlucca Cipriani](https://himalayas.app/@gianluccacipriani): Support IT, Iron City Premier Realty
- [Genaro Scarpato](https://himalayas.app/@genaroscarpato): Data Entry, Bayton Group