Typing SVG

Open to Work

┌──(alejandro㉿sec-ops)-[~]
└─$ whoami --verbose

> Name : Alejandro Zavala Zenteno
> Role : Jr. Cybersecurity Professional & (soon to be) Computational Systems Engineer
> Cert : ISC2 Certified in Cybersecurity (CC) · 2026–2029
> Base : Morelia, Michoacán · Mexico [UTC-6]
> Focus : SOC Operations | Detection Engineering | SIEM/XDR | Observability | IR
> Status : [ Seeking remote security roles · Open to opportunities ]

┌──(alejandro㉿sec-ops)-[~]
└─$ cat featured_projects.md

┌──(alejandro㉿sec-ops)-[~]
└─$ cat skill_matrix.txt

[ Security Operations ]
 SIEM/XDR ██████████░ Wazuh · OpenSearch · Splunk · Elastic Stack · Active response
 Detection Eng ████████░░░ XML rules · Behavioral TTPs · Telemetry analysis · Rule tuning
 SOC Workflow ███████░░░░ Alert triage · Reporting · Escalation · SOC KPIs · Workbooks & lookups
 Threat Hunt ████████░░░ FIM · Auth correlation · Discovery · C2 detection · IDS fundamentals
 Incident Resp ████████░░░ TheHive v5 · Triage runbooks · Containment SOPs · EDR basics · Kill chain
 Frameworks ████████░░░ MITRE ATT&CK · Cyber Kill Chain · Pyramid of Pain · NIST CSF · ISO 27001
[ Observability / DevOps ]
 Metrics ███████░░░░ Prometheus · cAdvisor · PromQL · Custom dashboards
 Logging ███████░░░░ Loki · Promtail · LogQL · Centralized pipelines
 Visualization ████████░░░ Grafana · OpenSearch Dashboards · KPI engineering
 Orchestration ████████░░░ Docker Compose · Multi-container stacks · Service discovery
[ Infrastructure ]
 Linux █████████░░ Ubuntu hardening · Debian · Bash scripting · syslog pipelines
 Containers ████████░░░ Docker · Docker Compose · WSL2 · IaC credential management
 Windows ██████░░░░░ PowerShell · WazuhSvc · AD basics
[ Networking ]
 Protocols ███████░░░░ TCP/IP · OSI Model · DNS · SSH · VPN (Sophos)
 Hardware ██████░░░░░ Cisco · Ruckus · Switches · Routers
 Analysis ██████░░░░░ Wireshark · Nmap · Firewall config · iptables
[ Offensive (lab only) ]
 Tools ██████░░░░░ Hydra · Nmap · Nikto · Metasploit · Kali · Reverse shells

┌──(alejandro㉿sec-ops)-[~]
└─$ systemctl status learning.service

●くろまる learning.service - Continuous Skill Development
 Loaded: loaded (/etc/systemd/system/learning.service; enabled; preset: enabled)
 Active: active (running) since Mon 2026年01月01日; always
 Main PID: 1337 (always_learning)
 Status: "Building toward remote SOC Analyst & Detection Engineering roles"
 Tasks: 4 (focused)
 Memory: 100%
 CPU: full-throttle
 Active units:
 ●くろまる detection-engineering-lab.target active (expanding custom ruleset)
 ●くろまる docker-observability-phase-4.service active (performance analysis & diagnostics)
 ●くろまる tryhackme-soc-level-1.path active (blue team path in progress)
 ●くろまる english-technical-writing.service active (daily)
 Queued for start:
 ○しろまる comptia-security-plus.target queued
 ○しろまる blueteam-labs-ctfs.service queued
 ○しろまる kql-sentinel-fundamentals.service queued

┌──(recruiter㉿interested)-[~]
└─$ cat hire_alejandro.txt

[ Open to ]
 • Jr. SOC Analyst (Tier 1 / Tier 2)
 • Detection Engineer (Junior)
 • Blue Team / Threat Hunter (Junior)
 • Security Operations · Observability-adjacent roles
[ Availability ]
 • Full-time · Remote-first (worldwide)
 • Timezone : America/Mexico_City (UTC-6) — flexible overlap with LATAM / US / EU-early
 • Languages : Spanish (native) · English (technical proficient)
 • Start date : Immediate · Notice period: none
[ Fastest way to reach me ]
 → LinkedIn DM (usually reply within 24h)
 → See contact badges below

┌──(alejandro㉿sec-ops)-[~]
└─$ cat /etc/motd

"The goal is not to be better than everyone else,
 but to be better than you were yesterday."
Building in public · Documenting every step · Failing forward.

[ Stack ]

Wazuh TheHive Prometheus Grafana Loki Docker Ubuntu Kali OpenSearch Python Bash MITRE ATT&CK

[ Connect & Profiles ]

LinkedIn ISC2 CC TryHackMe

Typing SVG