Curriculum vitae

Sodik Tursunboev

Cybersecurity Analyst · CEH

hello@sodik.eu · Warsaw, Poland

LinkedInGitHubTryHackMe

Download CV (PDF)One-page PDF in English

CEH-certified cybersecurity analyst with practical experience in Windows/Linux log analysis, threat detection, phishing investigation and incident response. Hands-on with Splunk, the Elastic Stack and SIEM/SOAR/EDR tooling in security projects and labs.

Practical experience

Independent security projects & labs

2023–present

Reproduce attack techniques, analyze Windows and Linux telemetry, develop security tooling and document investigations.

Selected projects

Custom SIEM + Sentinel BAS 2026

  • Built Python/Flask log ingestion, Sigma evaluation, alert correlation and analyst-approved response workflows.
  • Validated detection rules with Atomic Red Team and investigated unmatched attack simulations.

Active Directory Purple Team Lab 2026

  • Reproduced credential abuse, lateral movement and domain-compromise scenarios in an isolated domain.
  • Analyzed Windows Security, Sysmon and OpenSSH evidence and documented defensive recommendations.

ARGUS 2026 · Active development

  • Developing a Windows assistant with a Svelte 5 interface and FastAPI backend.
  • Implemented backend authorization to control sensitive desktop actions.

Technical skills

  • Splunk; Elastic Stack (ELK: Elasticsearch, Logstash, Kibana); SIEM, SOAR and EDR tooling.
  • Windows/Linux log analysis, alert triage, phishing and malware investigation, digital forensics and incident response.
  • Sigma, MITRE ATT&CK, Active Directory, web application testing (OWASP), Python, PowerShell and Bash.

Education

Vistula University

Bachelor’s degree in Computer Engineering · Cybersecurity

Full-time · In progress ·

7 semesters; graduation date not yet confirmed.

Credentials & achievements