Hunting threats before they hunt you. Building defenses that adapt, detect, and respond.
{
"name": "Md.Hasibur Rahman",
"role": "CSE Student",
"focus": "SOC Analysis",
"university": "State University of Bangladesh",
"year": "3rd Year",
"location": "Dhaka, Bangladesh",
"status": "Seeking Opportunities",
"interests": [
"Threat Detection",
"Malware Analysis",
"Incident Response",
"CTF Competitions"
]
}I'm a Computer Science student with a deep passion for cybersecurity, specifically focused on becoming a Security Operations Center (SOC) Analyst. I thrive on investigating threats, dissecting malware, and building detection rules that catch attackers in the act.
My journey into cybersecurity started when I became fascinated by how adversaries think — and more importantly, how defenders can stay one step ahead. I spend my free time participating in CTF competitions, building home labs, and writing threat investigation reports.
I'm currently seeking internship and entry-level SOC Analyst opportunities where I can contribute to real-world incident response, threat hunting, and security monitoring.
Built an isolated VM-based sandbox to safely detonate and analyze malware samples. Conducted static and dynamic analysis on real-world ransomware and RAT samples using IDA Free, ProcMon, and REMnux.
Investigated suspicious network traffic from a compromised host. Identified C2 beaconing, DNS tunneling artifacts, and lateral movement indicators using Wireshark and NetworkMiner.
Deployed a home lab SIEM using Elastic Stack. Ingested Windows event logs, Sysmon, and firewall logs. Built detection rules for brute force, privilege escalation, and persistence mechanisms mapped to MITRE ATT&CK.
Performed full header analysis and payload extraction on real phishing samples from PhishTank. Identified threat actor TTPs, spoofed sender domains, and malicious attachment indicators of compromise (IoCs).
Researched and produced a structured threat intelligence report on the Lazarus Group APT. Documented TTPs, IoCs, victimology, and defensive recommendations following the MITRE ATT&CK and STIX/TAXII frameworks.
Developing a custom detection rule library for Splunk targeting common adversary behaviors. Rules are aligned with MITRE ATT&CK and tested against Atomic Red Team simulations in a dedicated home lab environment.
Investigation reports, CTF writeups, and cybersecurity research notes.
Detailed notes and key takeaways from completing the TryHackMe SOC Level 1 learning path, covering log analysis, network traffic analysis, and incident response fundamentals.
Read Writeup →Static and dynamic analysis of a LockBit ransomware binary. Extraction of IoCs, network behavior, registry modifications, and YARA rule development.
Read Writeup →Step-by-step guide to setting up a professional SOC home lab using free and open-source tools: Elastic SIEM, Sysmon, Zeek, Wazuh, and a vulnerable Windows AD environment.
Read Writeup →Competed in PicoCTF and placed in the top 15% of participants globally. Solved challenges in forensics, cryptography, web exploitation, and binary exploitation.
Recognized on the Vice Chancellor's List for academic excellence in the Computer Science department. Achieved a 4.00 GPA while pursuing cybersecurity specialization coursework.
Achieved top 5% ranking on TryHackMe by completing over 80 rooms in areas including SOC fundamentals, malware analysis, web application security, and network security.
Founded and led the university's cybersecurity club, organizing CTF training sessions, guest speaker events, and workshops on ethical hacking fundamentals for 40+ members.
# Reach out for:
echo "Internship opportunities"
echo "Entry-level SOC roles"
echo "CTF team collaboration"
echo "Cybersecurity discussions"
# Response time:
ping me --expect-reply-within 24h
# Status:
OPEN_TO_OPPORTUNITIES=true