Highlights
Block or report wilsonvs
Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.
You must be logged in to block users.
Contact GitHub support about this user’s behavior. Learn more about reporting abuse.
Report abuseCybersecurity Analyst | Security Operations | SOC, SIEM, Incident Response, Vulnerability Management | ISC2 CC | 10+ Years IT Experience
I work at the intersection of IT operations and cybersecurity. My background includes system administration, network support, technical troubleshooting, user access management, Windows/Linux administration, security policy implementation, and log review. I use that foundation to study and document practical security operations: what happened, what evidence supports it, what risk it creates, and what action should come next.
This GitHub is organized around three areas:
- Security operations evidence: SOC labs, SIEM detections, Windows Event Log analysis, Python triage scripts, and GRC documentation.
- Cybersecurity research notes: threat breakdowns, detection ideas, incident response thinking, and vulnerability/risk review.
- Study guides: structured certification notes for CompTIA Security+ SY0-701, Google Cybersecurity, and ISC2 CC.
| Area | Repository | What It Shows |
|---|---|---|
| Study Hub | Cybersecurity Study Guides | Central hub for cybersecurity certification notes, study roadmap, glossary, quick references, and review checklists |
| Security Research | Cybersecurity Research | Threat research methodology, vulnerability review structure, detection note templates, and incident-response thinking |
| Security+ Notes | CompTIA Security+ SY0-701 | Exam-objective study notes covering threats, vulnerabilities, architecture, IAM, GRC, security operations, and incident response |
| Practical SOC Work | Cybersecurity Portfolio | Hands-on SOC labs, SIEM detections, Windows log analysis, Python automation, vulnerability review, and GRC evidence |
| Google Certificate Notes | Google Cybersecurity | Module-wise study notes for foundations, risk, networks, Linux, SQL, assets, detection, Python, and security readiness |
| ISC2 CC Notes | ISC2 CC Study Guide | Domain-wise CC notes for security principles, BC/DR/IR, access controls, network security, and security operations |
| Work Area | Evidence |
|---|---|
| Windows Event Log Analysis | Authentication event review and Event ID 4624/4625 investigation notes |
| Detection Engineering | Failed logon followed by successful logon detection using SPL, KQL, and Sigma-style logic |
| Threat Research Process | Research methodology and writeup templates for threat, vulnerability, and detection notes |
| Security Automation | Python log triage tool for repeatable authentication-event review |
| GRC and Risk | Security policy, risk register, and control mapping documentation |
| Study Material Design | Cybersecurity roadmap, glossary, IR cheat sheet, SIEM query plan, and review checklists |
I study current cybersecurity incidents and translate them into practical detection and response notes. My focus is on connecting threat activity with analyst thinking: logs to check, indicators to validate, likely impact, containment steps, and lessons for prevention.
Current focus areas:
- Threat intelligence and incident breakdowns
- SOC alert triage and investigation workflows
- Windows authentication events and logon behavior
- SIEM detection logic using SPL, KQL, and Sigma-style structure
- Vulnerability management, risk rating, remediation, and retesting
- Access control, MFA, least privilege, and privileged account review
- Network security, DNS, HTTPS/TLS, Zeek-style review, and outbound connection analysis
- Security governance, policy writing, risk registers, and control communication
| Category | Tools and Concepts |
|---|---|
| Security Operations | SOC monitoring, alert triage, incident response, evidence timelines, investigation notes |
| SIEM and Detection | Splunk, KQL, Microsoft Sentinel, Wazuh, Elastic, Sigma-style logic, MITRE ATT&CK |
| Systems and Logs | Windows Event Logs, Linux, PowerShell, Python, SQL, authentication events, endpoint review |
| Network Security | Wireshark, Zeek, Nmap, DNS, HTTPS/TLS, firewall logs, repeated outbound connection analysis |
| Risk and GRC | NIST CSF, policy writing, risk register, control mapping, vulnerability management |
| Cloud Fundamentals | AWS, Google Cloud, Azure security fundamentals, IAM, logging, secure configuration |
| Role | Organization | Period | Location |
|---|---|---|---|
| IT Administrator | RainCity Property Maintenance | Dec 2022 - Present | Greater Vancouver Metropolitan Area |
| System Administrator | Worldwide Cloud Solutions | Oct 2017 - Nov 2022 | Mangaluru, India |
| IT Support Specialist | United Planets Enterprises | May 2013 - Sep 2017 | Masqat, Oman |
| Jr Assistant | Manappuram Finance Limited | Jul 2010 - Dec 2012 | India |
| Application Support | Natural Farms | Jan 2012 - Apr 2012 | Mangaluru, India |
| Credential | Status |
|---|---|
| ISC2 Certified in Cybersecurity (CC) | 2025 |
| SOC Bootcamp, Thinkcloudly | 2026 |
| Google Foundations of Cybersecurity | 2024 |
| Google IT Support | Completed |
| Cloud Computing, NPTEL - IIT Kharagpur | 2019 |
| CompTIA Security+ SY0-701 | In progress |
- Expanding security research writeups into concise detection-and-response notes
- Improving SOC labs with screenshots, logs, timelines, and analyst conclusions
- Maintaining cybersecurity study guides as structured, easy-to-review learning material
- Building practical Python and PowerShell automation for repeatable security review tasks
- Email: wilsonvijaysequeira@gmail.com
- LinkedIn: wilsonvsequeira
- GitHub: wilsonvs
Pinned Loading
If the problem persists, check the GitHub status page or contact support.