Damilola Gbeja

SOC Analyst (Level 2) with hands-on experience in threat detection, incident investigation, and SIEM-based detection engineering using Splunk SPL. Skilled at building and tuning detection rules, validating true positives, and mapping adversary behavior to the MITRE ATT&CK framework across 10+ documented investigation labs. Brings a dual-discipline background in offensive security (penetration testing, vulnerability assessment, Kali Linux) and production cloud infrastructure management across AWS, GCP, Azure, and DigitalOcean.

Active on TryHackMe and maintains a public GitHub repository of Splunk SOC investigation labs. Available for fully remote cybersecurity roles globally.

SOC Analyst — Level 2 at Independent Practice (2024-01 – Present)

• Engineered and continuously optimized Splunk SPL detection rules targeting phishing, malware execution, lateral movement, and privilege escalation — reducing false positive alert volume across simulated enterprise environments.
• Investigated 50+ security alerts per month, validating true positives, suppressing benign events, and escalating confirmed incidents with structured triage documentation.
• Produced 10 documented SOC investigation labs (publicly available on GitHub: soc-investigation-labs), covering full attack chain reconstruction and Splunk-based detection across multiple threat scenarios.
• Performed multi-source log correlation across endpoint, network, and application layers to identify attacker dwell time and lateral movement paths.
• Mapped all investigated techniques to MITRE ATT&CK tactics and T-codes, enabling structured threat classification and reporting.
• Produced professional incident reports covering root cause analysis, IOC documentation, attack timeline reconstruction, and remediation recommendations.
• Active practitioner on TryHackMe (tryhackme.com/p/oladapodamiey), completing SOC, threat detection, and penetration testing learning paths.

Cloud & Systems Operator — Multi-Cloud Infrastructure at Personal Projects (2025-01 – Present)

• Deployed and administered production Linux environments across four cloud providers (GCP, AWS, Azure, DigitalOcean) supporting live backend services and security testing workloads.
• Implemented security hardening baselines including UFW/iptables firewall rules, SSH key management, fail2ban brute-force protection, and service isolation across all managed VPS instances.
• Configured uptime monitoring and alerting pipelines, maintaining high availability for real-time production applications.
• Managed CI/CD deployment pipelines and system scaling for web services serving live users.

Web3 Community Manager & Ecosystem Coordinator at Freelance (2024-01 – Present)

• Scaled Telegram and Twitter communities to thousands of active members for blockchain projects through structured engagement campaigns.
• Designed and deployed automated airdrop distribution systems with task verification, reducing manual overhead and improving participant trust.
• Collaborated with development and marketing teams on product launches, tokenomics communications, and community-driven security transparency initiatives.

B.Sc. in Cybersecurity Science – Federal University of Technology, Akure (2016-01 – 2023-12)