• Operated and managed SIEM platforms, including QRadar, ArcSight, and Wazuh.• Monitored network performance using Zabbix for proactive network oversight.• Managed Next-Generation Firewalls (NGFW), specifically Checkpoint,Sophpos and Sangfor.• Configured and maintained Web Application Firewalls (WAF) such as Fortigate and Imperva.• Conducted vulnerability assessments using Tenable Security Center.• Analyzed security incidents using Trend Micro Vision One XDR.• Develop a playbook.• Investigating alerts indicating potential security incidents.• Validation of security incidents.• Improved detection capability of the security monitoring system by reducing false positives/negatives• Created daily and monthly reports based on data from multiple sources (e.g: SIEM, Zabbix, Firewall)

I participated in a bootcamp organized by Infra Digital Foundation and Mastercard Academy. The curriculum focused on CompTIA Security+, Pentest+, and CySA+. Key concepts and skills I developed during the bootcamp include:• Understanding penetration testing methodologies and practices for assessing the security of applications and infrastructure.• Familiarity with techniques and tools used for security testing, such as Nmap, Metasploit, and others.• Knowledge of malware analysis and threat detection techniques.• Awareness of common cyber threats and security vulnerabilities affecting applications and IT infrastructure.• Understanding intrusion detection systems (IDS) and other network security technologies.• Familiarity with cybersecurity standards and regulations, including GDPR, PCI DSS, and more.• Best practices for managing cybersecurity incidents and responding to cyberattacks.• Knowledge of forensic analysis and cybersecurity investigation techniques.• Proficiency in penetration testing and vulnerability management concepts.• Understanding the use of software and operating systems, such as Kali Linux, in cybersecurity practices.

I completed an internship at Icon Plus as a Network Engineer and felt incredibly fortunate to have had the opportunity to work alongside industry experts. During this experience, I learned various skills, including network design, device configuration, and troubleshooting. I am eager to continue learning and growing in this field.Key concepts and skills I gained during the internship include:• Fundamental networking concepts, such as network topology, protocols, and architecture.• Configuration of network devices, including routers, switches, firewalls, and access points.• Basic network security principles, such as encryption, VPNs, and firewalls.• Understanding of VoIP (Voice over Internet Protocol) concepts and the network setup required to support these applications.• Familiarity with cloud and virtualization technologies in networking.• Effective network planning and design, including capacity planning and traffic management.• Diagnosis and resolution of complex network issues.• Network documentation and maintenance to ensure service availability and reliability.• Team collaboration and project management.

I completed the CompTIA Security+ training at the Fresh Graduate Academy, organized by KOMINFO and Infra Digital Foundation in collaboration with Mastercard. With the ever-evolving threat of cyberattacks, this certification is a valuable asset to any organization I work with. Thank you, Mastercard, for the opportunity to learn and grow in this field.Key topics I learned during this training include:• Fundamental concepts of information security and risk management.• Network technologies and their security measures.• Operating system and software security.• Database security.• Data protection and privacy.• Physical and environmental security.• Human and social aspects of information security.• Application security and secure software development practices.• Incident response and security management.• Security in cloud and virtualization environments.The training also covered internationally recognized information security frameworks and how to plan, implement, and maintain effective information security strategies. It addressed common standards and best practices, such as ISO/IEC 27001, NIST SP 800-53, HIPAA, and PCI DSS.