During my internship, I gained experience in the SOC field, including analyzing Windows process trees, log monitoring, and working with Splunk, Sysinternals, and Volatility. I also worked with Vagrant and learned how to deploy network infrastructure, configure firewalls, set up Nginx load balancing, manage Tomcat servers, and work with AWS cloud infrastructure.

Regulatory & Industry Standards:

• ISO/IEC 27001:2022
• NIST Cybersecurity Framework (CSF), SP 800-61
• GDPR (General Data Protection Regulation)
• HIPAA (Health Insurance Portability and Accountability Act)

Information Security Risk Management (GRC):

• Risk Assessment
• Audit & Compliance Analysis
• Policy & Procedure Development
• Third-Party Risk Management

Technical Security Assessment & Penetration Testing:

• Vulnerability Scanning
• Web Application Penetration Testing
• Vulnerability Remediation

Business Continuity & Incident ResponseBCP & DRP Planning:

• Infrastructure Resilience
• Incident Management & Response
• Root Cause Analysis

Security Architecture & Controls:

• Security Control Design
• Data Security & Backup
• Access Control Management