Junior SOC Analyst · Tier 1/2

DANIEL DAYAN

Cybersecurity & IT Support · SOC Operations

Defender by training, breaker by curiosity — 650 hours of Cisco & Fortinet training, hands-on SOC work with Splunk & QRadar, a self-built home lab, and a write-up for everything I solve.

currently learning: HTB Academy modules · SOC playbooks · Python automation
SIEM & INVESTIGATION
Splunk & IBM QRadar

Log search, SPL/AQL query authoring, alert triage, and incident containment workflows across SOC simulated environments.

ENTERPRISE INFRASTRUCTURE
Cisco & Fortinet Bootcamp

650-hour Israel MoD program: TCP/IP routing/switching, Windows Server Active Directory (GPO, Kerberos), and FortiGate NGFW.

SLA & INCIDENT TRIAGE
Military Service Coordinator

Managed soldier entitlements and time-sensitive requests under strict operational SLAs using CRM/SAP ticketing.

OFFENSIVE INTEL & LABS
HTB Academy Top 5% & CTF

Hands-on pentesting, attack path replication, and documented lab write-ups to understand adversary methodology.

ABOUT

Curiosity first. Method always.

Cybersecurity graduate of a hands-on 650-hour program sponsored by the Israel Ministry of Defense (Cisco & Fortinet specialization), with ongoing practice through Hack The Box Academy and a self-built home lab. Hands-on across enterprise networking, Windows Server/AD, Linux, FortiGate NGFW and SOC workflows — alert triage, log investigation and the incident response lifecycle with Splunk and IBM QRadar.

650Bootcamp Hours
5%HTB Academy Rank
3SIEM / SOAR Platforms
20+Write-ups

SKILLS & TOOLS

Tools of the trade.

SplunkSplunk SOAR IBM QRadar SIEMAlert Triage Log InvestigationIncident Response NmapWireshark Burp SuiteOWASP ZAP SQLMapMetasploit ffufHashcat HydraFortiGate NGFW Cisco IOS XEActive Directory Windows Server 2022Linux · Kali PythonBash PowerShellVLANs · OSPF · VPN/IPsec Help Desk SupportCRM & TicketingSAP ERP Data LookupStructured Troubleshooting
ITQ Cyber Bootcamp — 650hCisco (200h) · TCP/IP (125h) · Linux (125h) · AD (100h) · FortiGate (100h)
HTB Academy — Top 5%30+ offensive modules · web, AD & network security
IDF Operational Service (3 Years)Service Coordinator · SAP ERP, CRM ticketing & SLA triage
Languages: BilingualHebrew (Native) · English (Professional & Technical)

PROJECTS

Things I've built, broken & supported.

HTML · Web App LIVE TOOL

CTF Tracker

Single-page tracker for the CTF grind — 399 HTB & THM machines with flag checkboxes, hints, session timers, activity streaks, a reverse-shell generator and built-in cheat sheets. Zero backend, all local.

htmljavascriptlocalstorage
399 Machines · Single-Page Web App
JavaScript · Study App SIMULATOR

CCNA Lab

Study companion for the Cisco CCNA 200-301: 20 study topics, an 871-question drill bank with hints and explanations, and a full exam simulator — 103 questions, 120 minutes, scored /1000.

javascripteducation871 questions
103-Question Exam Simulator · Drill Bank
Obsidian · Notes FIELD VAULT

Notes

Field-ready penetration testing and cybersecurity notes — covering the full kill chain from enumeration to Active Directory attacks (Kerberoasting, DCSync), with command cheat sheets and attack playbooks.

pentestmethodologyactive-directory
20+ Attack Playbooks · Local Field Vault

EXPERIENCE & JOURNEY

How I got here.

2020 – 2022

High School Computer Science — 10 Units

Final project: an Android app in Java for crypto price tracking & currency conversion (USD/EUR/ILS), plus web development with HTML/CSS.

javaandroidhtml/css
2022 – 2025 · Military Service

Service Coordinator — Soldier Benefits, IDF

Managed soldier entitlements and sensitive requests under operational deadlines and strict SLAs, using SAP ERP and CRM ticketing workflows. Documented findings and next steps for technical and command stakeholders.

idfcrmsapticketingtriage
2024 – 2025 · ITQ Cybersecurity Bootcamp

650h Hands-On Training — Cisco & Fortinet

650 hours of hands-on training across five official modules on Israel's largest Cisco training lab: TCP/IP Networking, Windows Domain & Active Directory, Linux Administration, Cisco Security Technologies and Next-Gen Firewall / FortiGate — with SOC workflows on IBM QRadar and Splunk SOAR.

ciscofortigatesocqradar650h
2025 – Present

HTB Academy, Home Lab & CTF Write-ups

Self-directed offensive security on Hack The Box Academy, a self-built virtualized home lab (Windows Server AD + Kali), Wireshark traffic analysis — and a public write-up for everything I solve.

htb academyhome labwrite-ups

CTF WRITE-UPS

Latest CTF write-ups & lab notes.

TryHackMe · Web WALKTHROUGH

Support

Penetration testing of an internal Support Operations Platform — Hydra brute-force, role cookie forging, BOLA API abuse, path-traversal LFI, and command injection leading to root.

webapilfiMEDIUM
Write-up In Progress · No Link Yet

CONNECT

Open to SOC roles, CTF teams & collabs.