SOC Analyst running
Sep 2022 — Present
Ministrstvo za obrambo Republike Slovenije
·
Ljubljana, Slovenia
- Collection and correlation of security events from multiple sources (SIEM)
- Analysis of logs, network traffic, and endpoints
- Malware and malicious code analysis
- Real-time incident response
- System administration and ensuring high availability of services
- Threat intelligence gathering and processing (MISP, OpenCTI)
- Reverse engineering of suspicious binaries
- Writing and maintaining technical documentation
- Monitoring and tuning of detection rules and alerts
- Collaboration with other teams during security exercises and incidents