Open to opportunities

Mashrab User

@mashrabuser

Message

Cybersecurity specialist focused on penetration testing, red teaming, and SOC-driven detection engineering.

Uzbekistan

Message

What I'm looking for

I’m looking for a cybersecurity role where I can blend offensive testing with detection engineering—running red team exercises, strengthening SOC monitoring, and hardening infrastructure with ISO 27001/SOC2 alignment and continuous learning.

I’m a Cybersecurity Specialist with hands-on experience across penetration testing, red teaming, SOC operations, and digital forensics. I build reusable playbooks and automation for testing workflows, and I translate findings into actionable exploitation steps, business impact, and clear remediation guidance.

In SOC roles, I’ve tuned and operationalized detections using Splunk and Elastic, integrated threat intelligence into SIEM pipelines, and improved incident response speed by reducing false positives. I also bring practical cloud security and compliance alignment experience through AWS GuardDuty and CloudTrail monitoring, alongside secure infrastructure management and incident-ready playbooks.

Experience

Work history, roles, and key accomplishments

Current

Penetration Tester

Current

OctoSec

Nov 2025 - Present (8 months)

Performed internal and external reconnaissance to identify misconfigurations, exposed services, and insecure protocols. Hardened server/firewall/cloud configurations and supported red team exercises with reusable playbooks and post-exploitation frameworks.

Penetration Testing Vulnerability Assessment Red Teaming Attack Simulation Network Defense Cloud Security Enumeration Scripts Post Exploitation Report Writing Playbooks

SOC Analyst

Group-IB

Nov 2024 - Nov 2025 (1 year)

Tuned Splunk correlation rules and Elastic detection dashboards to reduce incident response time and improve detection quality. Conducted investigations on ransomware/phishing and integrated threat intelligence into SIEM pipelines, supporting AWS monitoring for SOC 2 readiness.

SOC Operations Splunk Elastic SIEM Windows Security Logs (Event IDs 4624 4625)Windows Event ID 4688 PowerShell Script Block Logging Credential Dumping Detection Malware Analysis DFIR Ransomware Investigation Phishing Threat Intelligence MISP AWS CloudTrail

Service Engineer

Light Technology

Jan 2024 - Nov 2024 (10 months)

Administered and optimized enterprise servers, including firmware upgrades, RAID rebuilds, and OS patching to maintain high uptime. Implemented CIS-based hardening, performed root-cause analyses, and supported ISO 27001/SOC 2 compliance with audit-ready logs and disaster recovery validation.

Server Administration Firmware CIS Benchmarks Turn Down Service Root Cause Analysis Disaster Recovery RTO RPO Targets ISO 27001 SOC

Cybersecurity Analyst Intern

OneSec

Dec 2023 - Mar 2024 (3 months)

Executed penetration tests on web and API applications, identifying vulnerabilities such as SQLi, XSS, and IDOR and mapping findings to MITRE ATT&CK. Assisted with SAST/SCA scanning and authored vulnerability reports with proof-of-concepts and remediation steps.

SQLI XSS IDOR SAST SCA Semgrep SonarQube Python Java Lateral Movement Reverse Shells Vulnerability Reports Proofs Of Concept remediation Lab Testing

System Administrator (Monitoring)

Turon Telecom

Sep 2023 - Jan 2024 (4 months)

Administered and secured Cisco network devices through IOS upgrades, ACL audits, and VLAN segmentation, maintaining high network availability. Deployed monitoring pipelines with SNMP/syslog and centralized logs into SIEM storage, improving detection and response times through runbooks and remediation of misconfigurations.