Looking for a job

Quân Hà minh

@qunhminh

SOC candidate who researched a CTI analysis workflow at CNSC Cybersecurity Center - UIT, reducing fabricated security content from ~65% to ~3%.

Vietnam

Message

What I'm looking for

I'm seeking a Security Operations Center (SOC) position where I can gain hands-on experience and directly contribute to monitoring and analyzing security incidents within an enterprise environment.

At CNSC Cybersecurity Center - UIT, I researched, developed, and evaluated a workflow that uses Large Language Models to extract data from Cyber Threat Intelligence reports, construct attack graphs, and generate Sigma rules. I implemented and tested it on 112 reports, extracting 3,093 IOCs and generating 3,033 Sigma rules.

I designed a scoring system to evaluate AI-generated security content, reducing its fabrication rate from ~65% to ~3%. I also integrated VirusTotal and Hybrid Analysis APIs to verify IOCs against threat intelligence databases.

On my hybrid-cloud SIEM project, I deployed centralized monitoring across AWS and OpenStack, using the ELK Stack and Filebeat to aggregate and normalize logs. I built dashboards and alerts to detect web attacks, and I’m seeking a SOC position where I can gain hands-on experience monitoring and analyzing security incidents in an enterprise environment.

Experience

Work history, roles, and key accomplishments

Research Intern

CNSC Cybersecurity Center - UIT

May 2026 - Aug 2026 (3 months)

Researched and developed a workflow using LLMs to extract data from CTI reports, construct attack graphs, generate Sigma rules, and verify output reliability. Integrated VirusTotal and Hybrid Analysis APIs for automated IOC verification and implemented the pipeline on 112 CTI reports, extracting 3,093 IOCs and generating 3,033 Sigma rules.