Ilkin Məcidov

I'm building hands-on SOC L1 capability through MilliSec's Blue Team program, LetsDefend, CyberDefenders, and practical investigation labs.

I led an Enterprise SOC Infrastructure Build capstone, hardening a two-domain Active Directory environment with GPO, LAPS, BitLocker, Sysmon, QRadar SIEM, Bitdefender XDR, a WAF, and an AbuseIPDB threat-intelligence pipeline. I also built a C#/.NET ransomware simulator to validate detection and response end to end.

In my independent detection-engineering lab, I converted Sigma rules to Splunk SPL and deployed T-Pot honeypots to study live attacker behavior. I've also reconstructed PCAP-based attack chains, investigated phishing incidents, documented IOCs, and mapped findings to MITRE ATT&CK and the Cyber Kill Chain.

I'm currently completing a remote cybersecurity internship covering web application penetration testing, malware analysis, ransomware simulation, and network/IoT security assessment with technical reporting and GitHub-hosted deliverables.