Looking for a job

Yevhen User

@yevhenuser1

Message

SOC Analyst at FNZ Group who cut false-positive alert noise by 20% with Sentinel queries and Splunk rule tuning.

United Kingdom

Message

At FNZ Group, I manage security incidents from alert detection through containment, eradication, and post-incident reporting. I triage security, phishing, and DLP incidents, and developed Python tools to automate log filtering, ticket processing, and evidence collection.

Previously, as a Junior SOC Analyst at FNZ Group, I investigated phishing campaigns and sign-in anomalies using Mimecast, Proofpoint, Entra ID, and Intune. My hands-on cybersecurity training at CAPSLOCK / Security Operations included incident handling, threat monitoring, and network traffic analysis with Wireshark, Zeek, and Snort.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

FNZ Group

May 2025 - Present (1 year 5 months)

Promoted to mid-level SOC Analyst, leading end-to-end incident lifecycle management from initial alert detection through containment, eradication, and post-incident reporting. Managed diverse security cases including compromised credentials, advanced phishing, insider threat risk, and endpoint malware infections across multi-platform environments.

Junior SOC Analyst

FNZ Group

Mar 2024 - Apr 2025 (1 year 1 month)

Monitored and triaged high-volume security event streams across CrowdStrike Falcon and Splunk SIEM in a regulated fintech environment. Investigated complex phishing campaigns using Mimecast and Proofpoint logs, conducting email header analysis, sandbox detonation review, and gateway domain blocks.

CrowdStrike Falcon Cloud Security Splunk Mimecast ProofPoint Microsoft Entra ID Microsoft Intune Virus Total AbuseIPDB CISCO Talos MITRE ATT&CK Email Security Phishing Analysis Threat Intelligence

Cybersecurity Practitioner

CAPSLOCK

May 2023 - Nov 2023 (6 months)

Executed 350+ hours of hands-on incident handling, threat monitoring, and vulnerability management scenarios aligned with CIISec standards. Simulated real-world breach investigations across Windows, Linux, and cloud environments using the MITRE ATT&CK and Cyber Kill Chain frameworks.