Carlos Morales

Cybersecurity Analyst leveraging disciplined military leadership and frontline emergency response experience to safeguard high-value assets in fast-paced, mission-critical environments. Demonstrates exceptional adherence to protocol, chain-of-command communication, and procedural accuracy built through U.S. Navy aircraft operations and EMT emergency care. Trained in industry-standard cybersecurity frameworks including NIST, MITRE ATT&CK, and RMF. Proven ability to detect threats, analyze incidents, remain calm under pressure, and execute rapid, structured responses aligned with defense-sector expectations. Seeking a SOC Analyst or Cybersecurity Analyst role supporting secure, resilient operations for defense or federal organizations.

• CompTIA Security+
• CompTIA Network+
• CompTIA A+
• (ISC)² SSCP - Associate
• Linux Essentials (LPI)
• ITIL V4 Foundation

• SOC Lab (Attack and Defend), Built and operated a virtual SOC using Oracle box, implemented Wazuh SIEM, Windows 10 endpoints, and used a Kali Linux VM to model adversarial behavior and defensive monitoring., Analyzed simulated threats by correlating Wazuh alerts with Windows security logs to identify brute-force patterns and anomalous authentication activity., Utilized NIST and MITRE ATT&CK methodologies and frameworks, including adversary mapping and remediation recommendations suitable for audit and technical leadership review., Generated incident response reports in relations to threat events and recommended respective remediation steps in order to patch/mitigate vulnerabilities.
• Lets Defend (Simulated SOC Lab), Conducted simulated formal investigations on day-to-day SIEM alerts such as quishing campaigns, phishing campaigns, credential compromise, workstation compromise and quarantine., Followed CSIRT incident response lifecycle and utilized malware and threat analysis tools such as totalvirus, QR raptor, Whois, Cyberchef, abuseIPDB., Generated incident response reports, post incident remediations and recommendations and escalated events in accordance with pre-established guidelines.
• Service Desk Simulator, Simulated a real world enterprise service desk environment and resolved end-user hardware, software and network connectivity issues., Practiced professional communication via chat box and provided service solutions to end-user or guided end-user through troubleshooting process to resolve incidents.