CyBlack (Manchester) — SOC Analyst
Performed phishing investigations using full email header analysis and SPF, DKIM, and DMARC validation to assess legitimacy and determine remediation needs. Conducted credentialed vulnerability assessments on Linux servers and Nginx-based web applications using Nessus, producing vulnerability reports for action. Executed static and dynamic malware analyses to identify IOCs and classify malware families using VirusTotal API integration and YARA rules. • Email authentication checks (SPF/DKIM/DMARC) for classification • Credentialed vulnerability scanning and reporting • IOC extraction and malware family identification with YARA/VirusTotal • SIEM-based monitoring using Splunk Cloud with dashboards and alerts