Jonas Joya

Details

Skills

Security Operations & Incident Response:
• SIEM monitoring and alert triage.
• Incident response playbooks.
• Detection and response workflows.
• Threat analysis.
• Phishing analysis.
• Web attack investigations.
• PCAP analysis.
• Sysmon log analysis.

Risk, Threat & Vulnerability Management:
• Understanding of assets.
• Threats, and vulnerabilities.
• Security risk management.
• Security hardening.
• Security frameworks and controls.

Network Security & Traffic Analysis:
• Network security fundamentals.
• VPN concepts.
• Wireshark.
• Nmap basics.
• Packet capture analysis.
• Basic investigation of suspicious network activity.

Systems, Platforms & Virtualization:
• Operating systems knowledge.
• Linux fundamentals.
• Kali Linux basics.
• Virtual machine concepts.
• Windows/Linux security operations support.

Scripting, Automation & Data Handling:
• Python for cybersecurity task automation.
• Python web data access.
• SQL fundamentals.
• Log parsing and structured data analysis.

Tools & Technical Documentation:
• Security incident response handbook handling.
• Technical documentation.
• AI prompting for cybersecurity workflows.
• Clear reporting of findings and investigation steps.

Core Analytical Skills:
• Problem solving.
• Critical thinking.
• Pattern recognition.
• Structured investigation.
• Attention to detail.

About

Aspiring SOC & CSIRT Analyst with a unique background in high-pressure orchestration and education. I leverage a decade of experience as an Orchestra Conductor to bring disciplined real-time multitasking, rapid incident triage, and precision analysis to cybersecurity operations.

In other Hands, I analyzed complex scores to detect interpretation errors and synchronize ensembles, I now apply that same rigor to packet analysis (PCAP), log correlation, and threat hunting. My transition is technically validated by the Google Cybersecurity Certificate and hands-on labs in Phishing Analysis, Web Attacks, and Sysmon Investigation (LetsDefend / CyberDefenders / TryHackMe). Combining this technical acumen with a proven ability to communicate complex data to diverse audiences, I am ready to effectively detect, contain, and report security incidents for an enterprise security team.

Moreover, my background includes hands-on experience in SOC operations, incident response, and threat detection. Through my “SOC en Casa” simulation project, I configured Wazuh SIEM to detect and analyze web-based attacks, authored detailed incident reports, and developed custom detection rules to improve alert accuracy. These experiences have strengthened my analytical skills and my ability to respond effectively under pressure, qualities that align closely with a fast-paced SOC & CSIRT environment. In addition to my technical expertise, I bring strong communication and documentation skills developed through my current role at Paymentus, where I manage secure workflows and collaborate with IT teams to identify system anomalies. I am fluent in English and Spanish, with basic French proficiency.