▍Quick tip: jump around with the menu on the leftmenu above, tap the bot (bottom right) for a tour, and keep an eye out for a hidden flag.

OPEN TO WORK · ENTRY-LEVEL SOC / DFIR

Radha Prabhakaran

SOC Analyst · Incident Response · Digital Forensics

Security operations analyst with an M.A.S. in Cyber Forensics and Security from Illinois Tech. I triage alerts, hunt through logs, and document findings so the next analyst doesn't have to start from zero.

DOWNLOAD RÉSUMÉ EMAIL ME LINKEDIN GITHUB
$ head -4 README_FOR_RECRUITERS.txt
role:SOC analyst · detection engineering · DFIR
location:Chicago · open to relocation and remote
status:available now · interviewing
continued:the rest of this README lives at ping radha (07)
EXPERIENCE
Oct 2025 – Present · Remote

Cybersecurity Automation Consultant

Gulf Coast Automation Group, LLC
details
  • Administer Google Workspace security controls, including security policy enforcement and MFA governance, to maintain access control and reduce attack surface.
  • Contribute to internal security policy documentation and NIST-aligned compliance reporting.
  • Vet technical candidates with OSINT to flag credential misrepresentation and deepfake identities.
  • Building an AI agent to automate job reconciliation.
Apr 2025 – Jul 2025 · 10-week training cohort

SOC Analyst Training Cohort (CyberPros to Success)

Raíces Cyber · 2,000+ simulated alerts triaged
details
  • Investigated and triaged over 2,000 simulated security alerts in an instructor-built Elastic SIEM environment, working through enrichment, severity classification, and escalation.
  • Hunted across simulated Sysmon, SonicWall, and Auditd/Osquery/FIM logs to identify and report instructor-designed attacks, including lateral movement, suspicious process execution, and credential misuse.
  • Tuned Elastic detection rule logic, thresholds, and event correlation to reduce repetitive false positives.
Feb 2025 – May 2025 · Chicago, IL

Graduate Teaching Assistant

Illinois Institute of Technology · Dept. of IT and Management
details
  • Supported 48 students in Introduction to Open Source OS: Linux/Windows administration, file permissions and shell environments.
  • Wrote training materials and feedback aligned to learning outcomes.
Jun 2024 – Aug 2024 · virtual internship · 80 hours

Cybersecurity Intern

247ERICPOINTCOM · remote
details
  • Built a Web Application Firewall prototype addressing the OWASP Top 10, documented with UML.
  • Led a remote 4-person team across time zones to deliver milestones on schedule.
02 // case summary

Case summary

■ ANALYST PROFILE · REF: RP-0x4A4F42 · PUBLIC● ACTIVE CASE
the journey so far, in four save points
  1. B.E. · 2023Electronics & Communication EngineeringKCG College of Technology, Chennai · GPA 3.84

    Came for the circuits, stayed for the cryptography. Started wondering who else might be reading the message.

  2. M.A.S. · 2025Cyber Forensics & SecurityIllinois Institute of Technology · GPA 3.90

    Forensics, eDiscovery and compliance. Learned that evidence needs a chain of custody, and so do good conclusions.

  3. 2025Raíces Cyber SOC cohort10 weeks · Elastic SIEM

    2,000+ simulated alerts later, it's official: I enjoy reading logs.

  4. nowGulf Coast Automation GroupCybersecurity Automation Consultant

    OSINT-based candidate vetting: cross-checking an applicant's public profiles, work history and digital footprint to confirm they are who they claim, and flagging deepfakes in remote interviews. Basically, making sure the person on the call is, in fact, a person.

EVIDENCE MAP
axis = proof items, not self-ratings · click a point
03 // toolkit

Skills, with receipts

Every skill below links to the evidence behind it: a project, a role, a certificate or an award.

↑ 5 skill areas · click one, or let them cycle
TOOLSElastic SIEM · Kibana · Splunk · Sigma · KQL · SPL · Sysmon · Osquery · Volatility · FTK Imager · Magnet AXIOM · Autopsy · E3 · DumpIt · Wireshark · Python · SQL · Bash · JavaScript · Git · GitHub Actions

Also: web and UI design with Figma, Wix and Lovable AI.

04 // case files

Projects

FEATURED · PERSONAL PROJECT

Chain Reaction

A privacy-first attack-path simulator: it shows how 24 everyday habits chain into 15 attack paths, and the cheapest link to break. Analyst mode maps every step to MITRE ATT&CK and shows where a defender could detect it. Started at the Elevate Women Global Hackathon (Sep 2026); I've kept building it since.

MITRE ATT&CK v20SigmaKQL / SPLMicrosoft Entra IDJavaScript
LIVE DEMO ↗ REPOSITORY ↗ DETECTION PACK ↗

DETECTION PACK (SIGMA)

  • CR-001 password-only sign-in from an unregistered device · T1078.004
  • CR-002 burst of failed passwords, then a success · T1110.004
  • CR-006 inbox rule that hides security emails · T1564.008
  • Validated in CI with SigmaHQ validators; tested against attack and near-miss sample logs.
05 // credentials

Certifications, training & badges

CREDLY PROFILE TRYHACKME PROFILE GITHUB / RADHA1008
06 // recognition

Highlights, research & awards

SHARKFEST'26 US · NASHVILLE · JUL 2026

Met the people who build Wireshark

Wireshark developer & user conference

After years of following their TCP streams, I got to meet the developers and core team behind the packet list. Managed one photo, with Gerald Combs himself. Kept it professional: zero feature requests. Those went in the bad-ideas channel instead, where Roland Knall talked me into entering, and one of them won the vote. Roland handed me the winner's T-shirt himself: my first bad idea with a measurable return on investment.

"May the best bad idea win!"
the idea: classified · if you were there, you know · status: pending implementation
WICYS CHICAGO · ACTIVE VOLUNTEER

Volunteering with WiCyS Chicago

Community events · Discord automation (in progress)

I help out at chapter events, like this Coffee Walk & Talk on protecting your digital footprint (Naperville, Aug 2026), and I'm currently building automation for the chapter's Discord.

"This is exactly the kind of morning that makes WiCyS Chicago feel like home."
IEEE WIE MAGAZINE · JUNE 2026 ISSUE

My 2025 Wireshark win, in print

IEEE WIE Day 2025 Global Tech Marathon · "Sniff and Secure: Wireshark in Practice"

I won session 1 of the IEEE WIE Day 2025 Wireshark workshop (fastest to finish the packet-analysis challenge), and the June 2026 issue gave it its own section.

"…reflects both her technical mastery and composure under pressure."
✓ IEEE Xplore ↗
ALSO ATTENDED / VOLUNTEERED
PROUD MEMBER OF
Women in CyberSecurityRaíces CyberBlackGirlsHackAnitaB.orgRotary Club
07 // contact

Let's talk

OPEN TO WORK

I'm interviewing for entry-level SOC, detection engineering and DFIR roles: full-time, on-site, hybrid or remote, and open to relocating anywhere in the US.

EMAIL · fastestcybrad8@gmail.com LINKEDIN/in/radha-prabhakaran GITHUB/Radha1008 RÉSUMÉDownload PDF ↓
Based in Chicago, IL · Central Time
secure-channel.sh
radha@portfolio:~$ whoami
radha prabhakaran · soc / detection / dfir · chicago, il
radha@portfolio:~$ cat availability.txt
status ......... open to work
roles .......... SOC T1 · detection · DFIR
relocation ..... yes, anywhere in the US
best contact ... cybrad8@gmail.com
radha@portfolio:~$ ./establish_contact.sh
Channel ready. Your turn: type help and press Enter.
radha@portfolio:~$
08 // capture the flag

One last thing

INCIDENT #0x2A · SEVERITY: CURIOUSSTATUS: UNSOLVED

A flag escaped containment.

A flag{...} is hiding somewhere on this page. Find it, submit it, and a classified file gets decrypted.

flag>
Awaiting evidence. No pressure. (Some pressure.)
attempts: 0 · analyst morale: high
personal_file.enc
DECRYPTING personal_file.enc...
tap the icon again for another tip