LEON KOCH

Junior SOC Analyst focused IT Support Specialist with enterprise Service Desk experience and practical security monitoring skills. Experienced in incident triage, log analysis, endpoint protection, and network troubleshooting in Windows environments. Hands on experience using Splunk, , Microsoft Defender, and Wireshark to investigate alerts and suspicious activity. Designed and operated a self built virtual security lab to simulate attacks and practice structured incident response and escalation workflows. Currently preparing for CompTIA Security+ certification.

Personal SOC & Security Lab, 

• Designed and maintained a virtual lab environment to develop practical Security Operations Center skills and hands on experience with monitoring and incident response.
• Deployed Splunk to centralize logs and monitor security events.
• Practiced continuous alert monitoring, incident triage, and structured escalation workflows.
• Used SentinelOne and Microsoft Defender to analyze and quarantine suspicious files and endpoint threats.
• Captured and inspected network traffic using Wireshark to investigate anomalies
• Simulated port scans, brute force attacks, malware scenarios, and conducted vulnerability assessments to test detection and remediation capabilities.
• Practiced documenting incidents and performing structured escalation to Tier 2/3 scenarios.
• Conducted vulnerability assessments and validated remediation actions.