> booting secure session…

> loading operator profile

> syncing threat feed (simulated)

> access granted

KD_SECDAUREN KOSHKENBEK
OPEN TO WORK
Koshkenbek Dauren

Koshkenbek Dauren

Cybersecurity Specialist · SOC Analyst L1

Open to work · Astana, Kazakhstan

ExperienceSOC Analyst L1 · Blue Team — Sauyt Lab, Sr Holding
EducationAstana IT University — Cybersecurity (graduated 2026)
Certifications & TrainingDarkControl Prompt Injection · AI Security University · CyberShield CSCSA · Red Hat RH124 attendance
LanguagesKazakh · Russian C1 · English B1 · Chinese HSK5

WHOAMI

DAURENKOSHKENBEK

SOC ANALYST L1/PENTESTER (IN TRAINING)

I'm a cybersecurity specialist focused on security monitoring, incident analysis and offensive security. I enjoy turning complex security data into clear insights and building practical solutions.

CV
Koshkenbek Dauren
KOSHKENBEK D.SOC L1 · ASTANA, KZ
ACCESS GRANTED HACK
EXPLOIT
SECURE
BLUE + RED
LIVE_THREATS SIMULATED
  1. ▸08:21Suspicious login attempt203.0.113.18
  2. ▸08:17PowerShell executionendpoint-04
  3. ▸08:12Port scan detected198.51.100.7
  4. ▸08:10Web shell upload/wp-admin/
EVENTS (SIMULATED)12,408
SYSTEM_STATUS
  • SIEM Monitoring85%
  • Log Analysis85%
  • Threat Analysis65%
  • Incident Response70%

Self-assessed proficiency, not telemetry.

MITRE ATT&CK VIEW ALL

// BLUE TEAM

DETECT / ANALYZE / RESPOND

  • Security monitoring (SIEM)
  • Log analysis & incident investigation
  • Threat analysis
  • Security reporting

// RED TEAM

FIND / EXPLOIT / VALIDATE

  • Reconnaissance & enumeration
  • Web application testing
  • Network & infrastructure testing
  • Privilege escalation
IN TRAINING
TERMINAL TRY 'hunt'
FEATURED_PROJECTS VIEW ALL
SKILLS & TOOLS VIEW ALL

Offensive Security

Kali
Burp
Metasploit
Nmap
SQLMap

Defensive Security

Splunk
Wireshark
Linux

Development

Python
React
TypeScript
Docker
Git
CERTIFICATES & TRAINING VIEW ALL
Prompt Injection & Input IntegrityDarkControl Certify · 15 Oct 2026
Introduction to AI SecurityAI Security University · 29 Sep 2026 · 2 hours
CyberShield CSCSACyberShield Academy · State Technical Service (STS)
Red Hat RH124Red Hat Training and Certification · 11 Jul 2025
Bachelor's — CybersecurityAstana IT University · 2026

Security is not a product, but a process.— Bruce Schneier

ABOUT

OPERATOR DOSSIER
cat about.md

I am Koshkenbek Dauren, a Cybersecurity graduate of Astana IT University and a SOC Analyst L1.

SHORT-TERM GOAL

SOC Analyst L2 / Blue Team Engineer

LONG-TERM GOAL

Penetration Tester with strong defensive background

BLUE TEAM MINDSET

I focus on visibility, detection logic, and understanding what is normal versus suspicious behavior in systems and networks.

RED TEAM MINDSET

I analyze systems from an attacker’s perspective, looking for misconfigurations, weak points, and realistic attack paths.

EXPERIENCE

REAL SOC WORK
Sauyt Lab logo

SOC Analyst L1

Sauyt Lab (Freedom)
February 03, 2026 – Present
  • Security event monitoring in SOC environment
  • Log analysis from network, endpoint, and system sources
  • Initial alert triage and incident investigation
  • Identification of suspicious activity and escalation
  • Working within a high-responsibility national security environment
Sr Holding logo

SOC Analyst L1

Sr Holding (China)
September 01, 2025 – February 01, 2026
  • Security event monitoring in SOC environment
  • Log analysis from network, endpoint, and system sources
  • Initial incident triage and alert investigation
  • Identification of suspicious activity and escalation when required
  • Working with security monitoring tools and dashboards
Kazakhtelecom logo

Network Security Project Participant

Kazakhtelecom (Sapa+)
January 20, 2025 – June 20, 2025
  • Participation in a network security project
  • Support of secure network infrastructure
  • Monitoring and basic analysis of network security events
  • Working within a large enterprise telecom environment

PROJECTS

REAL PROJECTS. REAL IMPACT.

Security Tools

Passive checks only — for assets you own or are authorized to test.

ATTACK CHAIN & SKILLS

TOOLS. MINDSET. RESULTS.
01

RECON

  • Nmap
  • Amass
  • Subfinder
  • Shodan
02

ENUMERATION

  • Burp Suite
  • Nuclei
  • Gobuster
  • Nikto
03

EXPLOITATION

  • Metasploit
  • SQLMap
  • Custom Scripts
04

PRIVILEGE ESCALATION

  • Linux
  • Windows
  • BloodHound
  • PowerShell
05

POST-EXPLOITATION

  • Lateral Movement
  • Persistence
  • Data Extraction
06

REPORTING

  • Documentation
  • Risk Analysis
  • Recommendations

The offensive part of this chain is what I am training toward; the defensive side is what I do at work.

Offensive Security
Kali Linux
Burp Suite
Metasploit
Nmap
SQLMap
Defensive Security
Splunk
Wireshark
Linux
Development
Python
React
TypeScript
Next.js
Supabase
Docker
Git

CREDENTIAL VAULT

CREDENTIALS & TRAINING
Astana IT University logo

Astana IT University

Bachelor’s Degree — Cybersecurity

Graduated in 2026

IBM certificate

Exploratory Data Analysis for Machine Learning

IBM • ID: 4E0CCP2N8JEO

LearnQuest certificate

Securing Cloud and Hybrid Networks

LearnQuest • ID: C6973UXET7O5

LearnQuest certificate

Next-Generation Firewalls and Intrusion Prevention

LearnQuest • ID: UVZK33SZYZ2E

IBM certificate

Supervised Machine Learning: Regression

IBM • ID: WGFI25H8VBDH