Mirfozil Gofurjonov

Aspiring Junior SOC Analyst. IT Management student. Warsaw, Poland.

I'm an Uzbek student living in Warsaw, studying IT Management and teaching myself cybersecurity. I'm working toward an entry-level SOC Analyst role, with a focus on security monitoring, threat detection, and incident analysis.

Languages: Uzbek (native), English (B2), Russian (very basic), Polish (very basic).

Open to Junior SOC Analyst and IT security internships in Warsaw and remote across Poland.

Projects

• SOC Detection Lab (Planned): A planned home lab: collect logs on an isolated network, run one safe scenario inside that lab, and document what the detection shows.
• Detection Engineering with Sigma (Planned): A planned set of Sigma rules for behaviours from the detection lab, each mapped to ATT&CK, with a test note and false-positive considerations.
• Python Alert Triage (Planned): A planned command-line tool that reads alerts exported from the lab and writes a structured triage note.
• MirfozilOS (In Progress): A browser desktop for this portfolio: windowed apps, a simulated terminal, and a shared virtual filesystem. It runs in the tab, with no backend and no monitoring of a real network.
• VaraQ
• Telegram bots

Skills

• Linux command line: learning
• File permissions and processes: learning
• Linux logs and journald: learning
• Windows Event Logs: learning
• TCP/IP, DNS, and HTTP: learning
• Wireshark: learning
• Nmap: learning
• SIEM concepts and alert workflow: learning
• Wazuh or Splunk: learning
• MITRE ATT&CK: learning
• Sigma rules: learning
• Python: learning
• Telegram Bot API: practiced
• TypeScript and React: learning
• Timeline notes: learning
• TryHackMe: learning

Roadmap

• Independent study: ongoing
• SOC Detection Lab: planned
• Detection Engineering with Sigma: planned
• Python Alert Triage: planned

Labs

• SOC Detection Lab: Planned
• Sigma detections: Planned
• Python alert triage: Planned