Open to opportunities

Pablo Rodriguez Sanz

@pablorodriguezsanz

Message

Entry-level SOC analyst focused on Splunk-driven investigations of phishing, malware, and IOC extraction.

Spain

Message

What I'm looking for

I’m looking for an entry-level SOC role where I can run Splunk-based investigations, extract IOCs, escalate incidents confidently, and keep improving my incident response and detection skills through hands-on work.

I’m an entry-level SOC Analyst building practical security capability through Let’s Defend, TCM Practical SOC work. I completed a 4-day practical SOC exam covering phishing and malware triage, SIEM investigations, IOC extraction, Splunk alert analysis, and incident documentation.

I investigate malicious Office documents using oletools and related static analysis techniques, and I support network and endpoint investigations with Wireshark, Sysmon, ProcMon, Registry, and Event Viewer. I also write YARA and Snort rules and practice safe malware handling in isolated VM environments, while staying active in L1NC weekend CTFs to sharpen analysis and detection thinking.

Experience

Work history, roles, and key accomplishments

Current

Incident Responder Path

Current

Let's Defend

Participating in the Incident Responder Path training with Let's Defend.

Splunk Core Power User (SPLK-1002)

Splunk

Jun 2026 - Present (1 month)

Completed the Splunk Core Power User (SPLK-1002) training/certification.

Practical SOC Analyst Associate (PSAA)

Let's Defend

May 2026 - Present (2 months)

Completed a 4-day practical SOC exam covering phishing, malware triage, SIEM investigations, IOC extraction, Splunk alert analysis, and incident documentation. Performed Office document malware analysis and network/endpoint investigations using common triage and analysis tooling.

SIEM Phishing IOC Extraction Incident Escalation Threat Hunting Olevba Oleid Xorsearch Static Analysis Wireshark Sysmon Procmon VBA Macro Deobfuscation YARA Snort Isolated VM Malware Handling Log Analysis Bash Scripting

SOC Analyst Path

Let's Defend

Feb 2026 - Present (5 months)

Completed the SOC Analyst Path training with Let's Defend.

CompTIA Security+

CompTIA

Dec 2025 - Present (7 months)

Earned the CompTIA Security+ certification.

Education

Degrees, certifications, and relevant coursework

Let’s Defend

Incident Responder Path (Let’s Defend), Incident Response

In progress with the Incident Responder Path on Let’s Defend.

Let’s Defend

Practical Security Analyst Associate (PSAA), Security Operations (SOC)

Activities and societies: 4-day practical SOC exam covering phishing and malware triage, SIEM investigations, IOC extraction, Splunk alert analysis, and incident documentation; also analyzed malicious Office documents and performed network/endpoint investigations using Wireshark, Sysmon, and ProcMon.

Completed the Practical Security Analyst Associate (PSAA) training/exam in May 2026.