Jangho Hyun

Security Analyst with 3+ years of experience across digital forensics, OSINT-led investigation, and threat intelligence, now focused on SOC operations. Experienced in 120+ forensic investigations and analytical support cases, with strengths in mobile artifact interpretation, user-activity reconstruction, and evidence-based troubleshooting. Led OSINT analysis that translated real-world marketplace fraud cases into actionable indicators, contributing to the validation of 101 actual fraud posts.

Building SOC capability through hands-on alert triage, SIEM log correlation, EDR telemetry analysis, attack-chain reconstruction, and MITRE ATT&CK mapping. Currently completing an MSc in Cyber Security Management at the University of Warwick.

Threat Intelligence Analyst at VANKADEL (2025-12 – Present)

• Conduct OSINT-based monitoring of suspected Microsoft 365 account-trafficking activity on public platforms, producing structured intelligence reports aligned with adversary TTP analysis.
• Assess account behaviour, content indicators, and external communication patterns; separate raw observations from analytical inferences and assign confidence levels to support analytical rigour.
• Review intelligence outputs for UK GDPR compliance, verifying anonymisation of sensitive identifiers prior to AI data ingestion.

Forensic Researcher at GMDSOFT (2023-05 – 2025-07)

• Conducted 120+ in-depth investigations, reconstructing user-activity timelines from mobile and system artifacts to support evidentiary interpretation.
• Identified the specific user actions producing an unattributed audio artifact in a high-profile Republic of Korea military intelligence-leak investigation, through one month of controlled reproduction on reference devices; analysis supported the prosecution leading to a 20-year conviction.
• Resolved 900+ analytical troubleshooting cases by developing standardised investigative workflows and repeatable solution patterns.
• Delivered 170+ hours of digital-forensics training to law enforcement on artifact interpretation and practical investigation methodology.

eDiscovery & Forensic Consultant at Deloitte (2021-10 – 2022-04)

• Processed and analysed large-scale evidence datasets using Nuix and Relativity; performed forensic imaging (Falcon, EnCase) under strict chain-of-custody protocols.
• Translated technical findings into investigative insight for legal and business stakeholders.

Threat Intelligence Project Lead at Cybersecurity Talent Program (2020-07 – 2021-02)

• Led an OSINT-informed threat-intelligence project on a 2.24M-post C2C marketplace dataset, applying code-based filtering and preprocessing to surface fraud cases relevant to adversary-behaviour analysis; co-authored the resulting peer-reviewed publication.
• Extracted behavioural IOCs from 1,500+ verified fraud cases using anomaly detection (3-sigma rule), OCR-based lure-keyword extraction, and image-similarity analysis (SSIM, average hash, Hamming distance).
• Built platform-specific detection rules mapping recurring adversary TTPs: messenger redirection, phishing-site spoofing, and price manipulation.
• Validated 101 fraud cases through direct adversary interaction, confirming phishing techniques and lure mechanisms used in the live ecosystem.

MSc in Cyber Security Management – University of Warwick (2026-09)

BSc in Computer Engineering – Gachon University (2019-03 – 2022-02)