Patrick Arthur
Mission, KS · On a mission to become a SOC Analyst; bringing hands-on SIEM, IR, and compliance chops, plus a genuine belief that good security is built with good people.
Western Governors University, Salt Lake City, UT
24 followers
About
Entry-level SOC Analyst candidate with a strong foundation in threat detection, log analysis, and network monitoring developed through a self-built cybersecurity homelab. Proven ability to operate under pressure and follow structured procedures, backed by a B.S. in Information Assurance and Cybersecurity and multiple CompTIA certifications.
Specialties
- Container Security
- IAM
- Incident Response
- SIEM Engineering
- SOC Analyst
Skills
- TCP/IP
- DNS
- DHCP
- VPNs
- Subnetting
- Network troubleshooting
- SIEM fundamentals
- Threat intelligence
- Vulnerability assessment
- Access control (IAM)
69 skills in total
Licenses & Certifications
-
CompTIA Project+
CompTIA
Issued May 2026
-
CompTIA Network+
CompTIA
Issued May 2026
-
CompTIA A+
CompTIA
Issued May 2026
5 certifications in total
Experience
-
Grocery Clerk
Sprouts Farmers Market Inc, Grocery
Jan 2020 — Mar 2020
Overland Park, Kansas
-
Cook
Whole Foods Market Inc
Aug 2018 — Jan 2020
Overland Park, Kansas
-
Line Cook
Ramen Kazama
Aug 2015 — Jul 2018
Minneapolis, Minnesota
Education
-
Western Governors University, Salt Lake City, UT
Bachelor of Science, Information Assurance And Cybersecurity
Mar 2026
-
Western Governors University
Master's, Cyber Security and Information Assurance
Aug 2026 — Aug 2028
4 education entries in total
Repositories
-
Pat4rthur/sovereignMediaLabV2
SOC homelab environment demonstrating SIEM deployment, log analysis, detection engineering, and incident response using Wazuh, Proxmox, and Linux containers.
Shell · 1 star
Recent posts
Just published a new incident response simulation in my cybersecurity homelab: Cloud Workload Compromise & DNS Exfiltration Detection.
What was built:
AWS EC2 instance (attacker foothold) connected to an on‑prem Wazuh SIEM via Tailscale VPN
Simulated IAM user reconnaissance, email forwarding rule (WorkMail API), and dnscat2 DNS tunneling
Custom Wazuh rule (ID 100200) to detect DNS tunneling tools in real time
The full kill chain is documented as a formal incident response playbook with MITRE ATT&CK mapping, artifacts, and lessons learned.
Check out the incident in my homelab repo:
🔗 https://github.com/Pat4rthur/sovereignMediaLabV2/tree/main/incident-response/incident-03
#cybersecurity #soc #wazuh #aws #tailscale #detectionengineering #blueteam
[celebration:new_certification]Has successfully verified **CompTIA PenTest+** (CompTIA), **CompTIA Project+** (CompTIA) and 2 more certifications
I've been building something in my spare time and I'd love some honest feedback from folks who live this stuff day to day.
It's an ongoing homelab; 10 nodes on Proxmox/LXC running a media stack, but the real point is the security layer. So far I've deployed Wazuh for SIEM, set up UFW microsegmentation on every container, rolled out a WireGuard VPN with least-privilege routing, written custom detection rules, and run through a full incident response simulation with a documented playbook. Most recently I hardened everything against CIS benchmarks and automated the compliance scanning. All the phases are documented on GitHub.
Next up: I'm planning to add cloud infrastructure to turn this into a hybrid environment and run incident response scenarios that span on-prem and cloud, the kind of thing an analyst would actually see in a real SOC. I also want to fold in some CASB-style detection and DNS exfiltration simulation.
If you work in SOC, detection engineering, GRC, or cloud security, I'd genuinely appreciate your take. What would you do differently? What's missing? What skills are actually showing up in your day-to-day that I should make sure I'm building here?
Repo: https://github.com/Pat4rthur/sovereignMediaLabV2
#homelab #cybersecurity #blueteam #SOCanalyst #infosec #cloudsecurity #continuouslearning