Hi, I'm Zaidan, an aspiring cybersecurity professional from West Jakarta, Indonesia.

Internal Security Audit
(Botium Toys)

Conducted an internal security audit using the NIST Cybersecurity Framework (CSF) for a fictional company. Assessed controls and compliance, identified critical risks, and provided recommendations to improve security posture and regulatory compliance.

Incident Report & Response Plan (NIST Cybersecurity Framework)

Produced a formal incident report for a simulated DDoS attack scenario. Applied the NIST CSF to analyze root cause, document impact, and develop protection, detection, response, and recovery strategies to strengthen network security posture.

Linux File Permissions Management

Demonstrated the ability to audit and modify file permissions in a Linux environment. Tasks included checking permissions with `ls -la`, interpreting the 10-character permission strings, updating file and directory access using chmod, and managing hidden files to enforce the principle of least privilege.

SQL Investigation Report – Filtering Security Data

Created a portfolio report applying SQL filters to investigate suspicious login attempts and employee machine data. Used AND, OR, NOT, and LIKE operators to detect failed after-hours logins, isolate login attempts outside of Mexico, and identify specific employee groups for security updates.

Incident Handler’s Journal – Documenting Security Investigations

Maintained an incident handler’s journal with 8 entries documenting phishing, ransomware, brute force, and data breach scenarios. Applied the NIST Incident Response Lifecycle and tools like Wireshark, Splunk, and Suricata to record findings, tools used, and remediation steps.

Python Algorithm for Access Control File Updates

Developed a Python script to automate the maintenance of an IP allow list for restricted systems in a healthcare organization. The algorithm reads, parses, and updates files to remove unauthorized IP addresses, ensuring accurate and secure access control.