Shegebay Arsen

SOC L1 Analyst

Alan Technology Group

Triaged Splunk alerts across client environments, tuned SIEM detections, and documented and escalated confirmed incidents.

• Triaged and investigated security alerts in Splunk across multiple client environments, working Windows Security, Linux auditd, and network log sources • Investigated authentication anomalies including brute-force and credential-guessing activity, separating true threats from benign noise to cut false positive • Built and tuned SIEM detections, including a Linux auditd rule for /etc/passwd and /etc/shadow tampering • Documented investigations and mapped activity to MITRE ATT&CK, escalating confirmed incidents to senior analysts

Intern, Red & Blue

RTEAM

Practiced penetration testing and WiFi assessments, joined red team lab exercises, and documented findings with IoC tables and ATT&CK mappings.

• Penetration testing exercises: enumeration, exploitation, privilege escalation, and post-exploitation reporting • WiFi security assessments - misconfigurations, weak authentication, and rogue access point exposure • Participated in red team engagements against lab AD infrastructure; documented findings with IoC tables and MITRE ATT&CK mappings • CTF challenges on ctf.rteam.kz, applying offensive security techniques in a structured lab environment

Intern, Information Security

WELON Agency

Supported employee training on recognizing phishing and social engineering and following safe security practices.

• Supported employee security awareness training on phishing and social-engineering recognition and safe-behavior practices

B.Sc., Cybersecurity

Astana IT University (AITU)