Open to opportunities

Ruben Williams

@rubenwilliams

Message

I investigate security alerts and build hands-on SOC detection labs.

United States

Message

What I'm looking for

I'm seeking a Tier 1 SOC Analyst role where I can apply hands-on alert triage, SIEM investigation, traffic analysis, endpoint monitoring, phishing analysis, and evidence-backed case reporting.

I'm transitioning from Tier 1 help desk support into security operations, backed by TryHackMe's hands-on Security Analyst Level 1 certification and a completed SOC Level 1 path.

At Inspiritec, I triage and resolve 20–30 ServiceNow tickets daily, diagnose hardware, software, account, and network issues, and clearly escalate findings by severity and scope. I also manage 10–20 inbound support calls per day through Genesys Cloud.

I've built Elastic and Wazuh SIEM labs, authored and tuned detection rules, created Kibana triage dashboards, investigated endpoint telemetry, and validated malware detection in an isolated Windows VM. My security work includes network traffic analysis, phishing analysis, endpoint monitoring, threat intelligence, and MITRE ATT&CK mapping.

Experience

Work history, roles, and key accomplishments

Current

Tier 1 Help Desk Analyst

Current

Inspiritec

Jan 2024 - Present (2 years 8 months)

Triage and resolve 20-30 end-user tickets per day in ServiceNow, averaging 10-15 minutes from intake to resolution. Handle 10-20 inbound support calls per day through Genesys Cloud, managing queue volume and routing or escalating by severity and scope.

ServiceNow Genesys Cloud Troubleshooting Customer Support Ticketing Systems

IT Intern (Paid)

Orleans Tech

Jan 2020 - Dec 2021 (1 year 11 months)

Disassembled, diagnosed, and reassembled 30+ desktop systems in a hardware repair and recycling program, testing each build to confirm functionality. Configured and operated virtual machines in Hyper-V for lab exercises, and completed structured hands-on technical training twice weekly.

Diagnostics Hyper V Virtualization Troubleshooting