shino@soc:~$

shino@soc:~$ whoami

ShinoShamit

Cybersecurity Analyst // SOC · Detection Engineering · Cloud Security

Master of Cybersecurity graduate from RMIT. I build monitoring labs in Microsoft Sentinel and Wazuh, write the detections that catch real attacks, and explain what I find to the people who have to act on it.

Open to roles · Australia-wide, remote or on-site
View projects Download resume Get in touch
analyst-console · tty1
20real brute-force attempts detected within 1 hour of exposing an Azure VM, caught with KQL I wrote
20/ 6 HIGHsecurity issues found in a Supabase app assessment during my TeckNova internship
T1110.001custom Wazuh rule for SSH brute force, mapped to MITRE ATT&CK and proven against live attack traffic
~/about

Profile

Cybersecurity graduate with a Master of Cybersecurity from RMIT and a Bachelor of Computer Science, with hands-on experience securing and monitoring cloud environments.

I built a monitoring lab on Azure with Microsoft Sentinel, configured network rules and log forwarding, and detected 20 real brute-force attacks within an hour using KQL queries I wrote. I've built detection labs in Wazuh, and during my internship I assessed an application for security vulnerabilities and explained the results to developers and non-technical stakeholders.

I work across both sides of the kill chain: defensive detection engineering, and studying offensive methodology through TryHackMe. You can't write rules that catch attackers without thinking like one first. I'm also keen to grow into advisory work, helping organisations strengthen their security and meet compliance requirements.

Off the clock I play keyboard at church. Analysts and musicians share the same core skill: hearing the moment something is off-key. And as a Malayalam cinema fan, Drishyam taught me that the logs always tell the truth.

// currently

  • Building an OT remote asset monitoring lab over Modbus TCP
  • Preparing for CompTIA CySA+ (November 2026)
  • Microsoft SC-900 planned for December 2026
  • Studying pentesting methodology on TryHackMe
  • Seeking SOC, detection and security analyst roles
Base
Melbourne, VIC, Australia
Open to
SOC Analyst, Detection, Threat Hunting, Junior Pentesting, IT Security
Work
Australia-wide, remote or on-site
Member
Australian Information Security Association (AISA)
~/projects

Lab Work

sentinel · securityevent
CompletedDec 2025 – Jul 2026

Cloud SOC & SIEM Monitoring Lab

A self-directed SOC environment on Azure, modelled on a hospital-style critical infrastructure network, that simulates real-world threat detection and incident investigation.

  • Configured a Windows Server VM, Azure network security rules and log forwarding, and troubleshot ingestion until events arrived reliably.
  • Caught 20 real brute-force attempts within 1 hour of exposing the VM to the internet.
  • Wrote KQL to detect brute-force logins (Event ID 4625) and suspicious PowerShell activity, and kept an evidence log for each alert.
Microsoft SentinelAzureKQLPowerShellWindows Event Logs
docker · wazuh · sigma
CompletedJul – Sep 2026

SSH Brute-Force Detection Lab

A self-built Docker lab pairing an attacker with a Linux target to design, test and prove a custom detection.

  • Wrote a Sigma rule for failed SSH logins and a custom Wazuh rule (5+ failures in 5 minutes) mapped to T1110.001, then confirmed it fired on real brute-force traffic.
  • Found a flaw in my own rule: it counted failures per host instead of per attacking IP, which could raise false alarms. Rescoped it.
  • Documented the whole build in a public GitHub repo so others can replicate it.
WazuhSigmaDockerMITRE ATT&CK
modbus tcp · ics
In progressOct 2026 – present

OT Remote Asset Monitoring Lab

A Docker lab that simulates an industrial controller (PLC) and an operator workstation talking over Modbus TCP.

  • Using Wireshark to analyse Modbus traffic and separate normal reads from writes to the controller.
  • Writing a Wazuh detection rule for unauthorised write commands, mapped to MITRE ATT&CK for ICS.
Modbus TCPPython (pymodbus)DockerWiresharkWazuh
// more from the lab
n8n · pipeline

Cybersecurity Job Intelligence System

An automated n8n pipeline that pulls cybersecurity job listings across Australia through Google APIs and SerpAPI, then normalises, deduplicates and scores them. Rule-based filters drop clearance-gated and citizenship-restricted roles before ranked results reach a live dashboard.

n8nREST APIsOAuth2SerpAPI
pcap · burp suite

Web & Network Security Labs

SQLi, XSS and broken access control exercises in controlled labs with Burp Suite and SQLmap. PCAP analysis in Wireshark to isolate C2 beaconing, exfiltration attempts and anomalous protocol behaviour, with every finding written up as a structured report.

Burp SuiteSQLmapWiresharkOWASP Top 10IOCs
kill chain · ptes
Ongoing study

Pentesting Methodologies

A structured study of penetration testing frameworks on TryHackMe, from scoping and recon to exploitation, post-exploitation and reporting. Each phase becomes a question for the defender: which log source would catch this?

Cyber Kill ChainPTESOSSTMMOWASP WSTGNIST SP 800-115
~/experience

Field Record

Jul 2025 – Oct 2025Caulfield, VIC

Cybersecurity Intern · TeckNova IT Solutions

  • Assessed a Supabase application (authentication, row-level security, storage, Edge Functions) and identified 20 security issues, 6 of them high risk.
  • Communicated the issues to developers and non-technical staff so they could agree on the priority-one fixes.
  • Applied STRIDE threat modelling to trace weaknesses back to their root cause and help the team resolve the highest-risk issues.
  • Led the team's research section, collating findings from multiple contributors into one document for review.
May 2024 – PresentWyndham, VIC

Lifestyle Assistant · Mercy Place Wyndham

  • Maintain accurate records across rotating shifts in a compliance-driven aged-care setting.
  • Handle sensitive resident and family information under strict confidentiality requirements.
2023 – 2025

Master of Cybersecurity

RMIT University · Melbourne, VIC

2019 – 2023

Bachelor of Computer Science

Rajagiri School of Engineering and Technology

~/skills

Toolkit

Cloud Security

Microsoft AzureMicrosoft SentinelEntra ID sign-in monitoringAzure network security rulesMicrosoft 365Microsoft Defender

Security Operations

SIEM: Sentinel, WazuhAlert triageIncident investigationKQLSigmaVulnerability assessmentRisk assessmentThreat hunting

Infrastructure & Scripting

Windows ServerLinuxDockerPowerShellPythonn8n

Offensive & Network

WiresharkNmapBurp SuiteMetasploitSQLmapTryHackMe

Frameworks

NIST CSFMITRE ATT&CKACSC Essential EightSTRIDE
CertificationCompTIA CySA+November 2026
CertificationMicrosoft SC-900Planned · December 2026
CommunitySession Host, Australian Cybersecurity Conference 2025Canberra and Melbourne
CommunityAISA MemberAustralian Information Security Association
LeadershipSyro Malabar Youth MovementLed two community events end to end as part of the Melbourne West leadership team. Volunteer, Unite National Conference, Oceania 2025.
~/contact

Open a Channel

Let's talk detection.

I'm looking for SOC analyst, detection engineering and security analyst roles across Australia, remote or on-site. I'm also happy to talk about referrals or anything SIEM, threat hunting or OT security.

// signal is monitored. response time is fast.

Emailshinoshamitau@outlook.com
LinkedInlinkedin.com/in/shino-shamit↗ GitHubgithub.com/shinoshamit25-afk↗ ResumeShino_Shamit_Resume.pdf↗