Tate Pannam — SOC Analyst Resume

SUMMARY

Cybersecurity practitioner transitioning into SOC operations with strong hands-on experience across threat detection, log analysis, incident triage, and MITRE ATT&CK mapping. Background in offensive security provides deep attacker-behaviour context that directly enhances detection accuracy and alert quality.

Recently completed Cert IV in Cyber Security (Victoria University), a nationally recognised AQF qualification, with a TAFE medal nomination. Actively documenting daily SOC investigations on inksec.io — 119 investigations, 119 YouTube walkthroughs, 95 unique MITRE techniques mapped across a public portfolio of 204 full lab writeups.

Extensive IT support and systems experience across Australian telecoms, freelance digital operations, and small-business infrastructure. Clear communicator with proven ability to document, escalate, and work under pressure.

CERTIFICATIONS

Certification	Issuer	Status
Investigating Windows Endpoints (Gold)	13Cubed	Completed
Investigating Windows Memory (Gold)	13Cubed	Completed
Investigating macOS Endpoints (Gold)	13Cubed	Completed
Architecting the Hunt	13Cubed	Completed
CDSA – Certified Defensive Security Analyst	Hack The Box	Completed
SAL1 – SOC Analyst Level 1	TryHackMe	Completed
SOC Analyst Learning Path	LetsDefend / HTB	Completed
AWS Academy Cloud Foundations	AWS Academy	Completed
CPTS – Certified Penetration Testing Specialist	Hack The Box	Completed
CWES – Certified Web Exploitation Specialist	Hack The Box	Completed
BSCP – Burp Suite Certified Practitioner	PortSwigger	Completed
eJPT – Junior Penetration Tester	INE	Completed
ICCA – INE Certified Cloud Associate	INE	Completed
BTL1 – Blue Team Level 1	Security Blue Team	Completed
Cert IV in Cyber Security	Victoria University	Completed
SC-200 – Security Operations Analyst Associate	Microsoft	Completed
CCDL1 – Certified CyberDefender Level 1	CyberDefenders	Completed
CDCA – Cyber Defense Certified Analyst	Level Effect	Completed
CDETH – Certified Detection Engineer & Threat Hunter	Level Effect	Completed
CCSA – Cybrixen Certified SOC Analyst	Cybrixen	Completed

CORE COMPETENCIES

Detection & Monitoring

Alert triage & escalation workflows
Windows Event Log & Sysmon telemetry analysis
Linux audit log & auth log investigation
SIEM log ingestion, normalisation, correlation
DNS / HTTP / TLS traffic pattern analysis
Anomaly detection: process trees, persistence
MITRE ATT&CK technique mapping
Cloud logging fundamentals (CloudTrail, IAM)

Incident Response

Alert validation, IOC identification, containment
PowerShell abuse, scheduled tasks, run key analysis
Incident timeline construction & documentation
Memory forensics (Volatility 3)
Network forensics (Wireshark, Zeek, Suricata)
OSINT pivoting and IOC enrichment

Offensive Knowledge (Detection Context)

Web attack patterns: SQLi, LFI, RCE, IDOR, SSRF
AD paths: Kerberoasting, Pass-the-Hash, ESC1
Attacker tooling: Mimikatz, Impacket, PsExec
Privesc and post-exploitation behaviour patterns

Tooling

Splunk, Wazuh, Elastic SIEM
Wireshark, Zeek, Suricata, Snort
Volatility 3, Autopsy, FTK Imager, NetworkMiner
Sysmon + SwiftOnSecurity ruleset
Bash, Python (intermediate)

PORTFOLIO

inksec.io — Blue Team SOC Portfolio (public, updated daily)

119 Investigations

119 YouTube Videos

95 MITRE Techniques

204 Lab Writeups

Daily investigations — LetsDefend alerts triaged using 5W methodology, documented with MITRE ATT&CK mapping
Lab writeups — CyberDefenders and BTLO labs covering memory forensics, network analysis, OSINT, DFIR, malware investigation
Leaderboard ranking — CyberDefenders #2 global / #1 AU (2400 pts), BTLO #3 global / #2 AU (1355 pts)
YouTube series — live walkthroughs as part of the Day N of Becoming a SOC Analyst series
Custom tooling — Python/Jekyll pipelines powering searchable command reference, auto-generated lab grid, MITRE heatmap

PROFESSIONAL EXPERIENCE

Freelance IT & Digital Systems Consultant — Thailand

2011 – 2024

Managed end-to-end IT infrastructure for multiple small-business clients — hosting, DNS, SSL, and access controls — serving as the sole security and systems contact for each account
Identified and responded to bot attacks, brute-force attempts, and outages through log-based analysis — restoring services and documenting root causes to prevent recurrence
Deployed monitoring and alerting across client systems, enabling proactive detection of malware and misconfigurations before they escalated to outages

IT Helpdesk Support & Team Manager — Primus Telecom, Melbourne

2002 – 2010

Delivered L1/L2 technical support across broadband, VoIP, and email for a national customer base — resolving high call-volume queues consistently within SLA targets
Diagnosed complex network faults — authentication failures, packet loss, DNS issues — using modem and router telemetry to identify root causes and reduce repeat contacts
Led a team of 15+ support agents — exceeded KPI targets, built training materials and a knowledge base that improved first-call resolution across the team
Coordinated complex fault escalations with the NOC, correlating service data across systems to accelerate resolution of outages affecting multiple customers

Qualification	Institution	Status
Cert IV in Cyber Security	Victoria University	Completed 2026 ★ TAFE Medal Nomination
Cert IV in Information Technology	Computer Power St Kilda	Completed