Philip Zangara

SOC Analyst and Detection Engineer

About

Philip Zangara

I’m Philip Zangara, a cybersecurity analyst focused on detection engineering, vulnerability management, and threat hunting.

I completed a cybersecurity internship at Log(N) Pacific, where I worked across vulnerability management and security operations. Outside of work, I build and document security projects using Splunk, Sigma, Suricata, and MITRE ATT&CK.

Experience

Cybersecurity Analyst Intern, Log(N) Pacific

July 2026 to September 2026. Vulnerability Management and Security Operations.

I ran Tenable scans across Windows and Linux systems and prioritized findings by risk. I wrote PowerShell remediations that helped the server team cut critical vulnerabilities by 50%, high by 100%, and medium by 83%. I also audited systems against DISA STIGs and automated STIG implementation with PowerShell.

I hunted threats in Microsoft Defender for Endpoint and found indicators of brute force attacks, data exfiltration, and ransomware. I built custom detection rules that automated isolation and investigation. I stopped brute force incidents on exposed hosts with inbound NSG rules. I also built Microsoft Sentinel dashboards for logon failures and malicious traffic, and queried logs with KQL.

Education

M.S., Cybersecurity and Information Assurance
Western Governors University, 2025

B.A.S., Cybersecurity
St. Petersburg College, 2024

Certifications

CompTIA SecurityX, CySA+, PenTest+, Security+, and A+.

Splunk Core Certified Power User, Core Certified User.

Microsoft Azure Fundamentals (AZ-900).

Centri Blue Team Level 1

Connect

The fastest way to reach me is LinkedIn. My code is on GitHub.