Tshegofatso Ditshidi

Certified Cybersecurity Professional - SOC L1 Analyst Intern

Talent

Sandton, GautengMember since May 22, 2026

MITRE ATT&CK frameworkPatching processesStandard Operating Procedures (SOPs)IDS/IPSEndpoint detection toolsThreat analysisDatabase ManagementHTMLCSSJavaScriptReactNode.jsSecurity tools: Firewalls, Intrusion Detection Systems, SIEM

Hire this person

Send a job offer directly to this candidate

MITRE ATT&CK frameworkPatching processesStandard Operating Procedures (SOPs)IDS/IPSEndpoint detection tools

About

Certified, analytical Cybersecurity Professional completing an Advanced Occupational Certificate (NQF6) with hands-on experience as a SOC L1 Analyst Intern. Backed by a strong portfolio of industry-recognized credentials, including CompTIA PenTest+, Security+, CNVP, and Microsoft AZ-500. Proven ability to conduct real-time SIEM monitoring using Wazuh and Graylog, investigate security incidents, and map adversary behavior using the MITRE ATT&CK framework.

A disciplined professional who strictly adheres to Standard Operating Procedures (SOPs) while combining a proactive defensive strategy with offensive security insights to safeguard enterprise infrastructure.

Experience

SOC L1 Analyst Intern - Scarybyte Pty Ltd

(2025-12 - 2026-03)

Monitoring and analyzing security alerts from SIEM tools (Wazuh & Graylog).
Gaining exposure to vulnerability management tools and patching processes.
Investigating suspicious activities such as phishing attempts, malware infections and unauthorized access.
Collecting logs, screenshots and evidence for deeper analysis.
Awareness of MITRE ATT&CK framework for mapping adversary behavior.
Familiarity with IDS/IPS, endpoint detection tools.
Working closely with SOC L2/L3 analysts, IT teams and management.
Tagging, categorizing and escalating alerts according to severity.
Following Standard Operating Procedures (SOPs) for incident response.

Bootcamp Student - SheCodes Foundation

(2024-01 - 2025-01)