┌──(alejandro㉿sec-ops)-[~]
└─$ whoami --verbose

> Name   : Alejandro Zavala Zenteno
> Role   : Jr. Cybersecurity Professional & (soon to be) Computational Systems Engineer
> Cert   : ISC2 Certified in Cybersecurity (CC) · 2026–2029
> Base   : Morelia, Michoacán · Mexico  [UTC-6]
> Focus  : SOC Operations | Detection Engineering | SIEM/XDR | Observability | IR
> Status : [ Seeking remote security roles · Open to opportunities ]

┌──(alejandro㉿sec-ops)-[~]
└─$ cat featured_projects.md

┌──(alejandro㉿sec-ops)-[~]
└─$ cat skill_matrix.txt

[ Security Operations ]
  SIEM/XDR      ██████████░  Wazuh · OpenSearch · Splunk · Elastic Stack · Active response
  Detection Eng ████████░░░  XML rules · Behavioral TTPs · Telemetry analysis · Rule tuning
  SOC Workflow  ███████░░░░  Alert triage · Reporting · Escalation · SOC KPIs · Workbooks & lookups
  Threat Hunt   ████████░░░  FIM · Auth correlation · Discovery · C2 detection · IDS fundamentals
  Incident Resp ████████░░░  TheHive v5 · Triage runbooks · Containment SOPs · EDR basics · Kill chain
  Frameworks    ████████░░░  MITRE ATT&CK · Cyber Kill Chain · Pyramid of Pain · NIST CSF · ISO 27001

[ Observability / DevOps ]
  Metrics       ███████░░░░  Prometheus · cAdvisor · PromQL · Custom dashboards
  Logging       ███████░░░░  Loki · Promtail · LogQL · Centralized pipelines
  Visualization ████████░░░  Grafana · OpenSearch Dashboards · KPI engineering
  Orchestration ████████░░░  Docker Compose · Multi-container stacks · Service discovery

[ Infrastructure ]
  Linux         █████████░░  Ubuntu hardening · Debian · Bash scripting · syslog pipelines
  Containers    ████████░░░  Docker · Docker Compose · WSL2 · IaC credential management
  Windows       ██████░░░░░  PowerShell · WazuhSvc · AD basics

[ Networking ]
  Protocols     ███████░░░░  TCP/IP · OSI Model · DNS · SSH · VPN (Sophos)
  Hardware      ██████░░░░░  Cisco · Ruckus · Switches · Routers
  Analysis      ██████░░░░░  Wireshark · Nmap · Firewall config · iptables

[ Offensive (lab only) ]
  Tools         ██████░░░░░  Hydra · Nmap · Nikto · Metasploit · Kali · Reverse shells

┌──(alejandro㉿sec-ops)-[~]
└─$ systemctl status learning.service

● learning.service - Continuous Skill Development
     Loaded: loaded (/etc/systemd/system/learning.service; enabled; preset: enabled)
     Active: active (running) since Mon 2026-01-01; always
   Main PID: 1337 (always_learning)
     Status: "Building toward remote SOC Analyst & Detection Engineering roles"
      Tasks: 4 (focused)
     Memory: 100%
        CPU: full-throttle

   Active units:
   ● detection-engineering-lab.target        active  (expanding custom ruleset)
   ● docker-observability-phase-4.service    active  (performance analysis & diagnostics)
   ● tryhackme-soc-level-1.path              active  (blue team path in progress)
   ● english-technical-writing.service       active  (daily)

   Queued for start:
   ○ comptia-security-plus.target            queued
   ○ blueteam-labs-ctfs.service              queued
   ○ kql-sentinel-fundamentals.service       queued

┌──(recruiter㉿interested)-[~]
└─$ cat hire_alejandro.txt

[ Open to ]
  • Jr. SOC Analyst (Tier 1 / Tier 2)
  • Detection Engineer (Junior)
  • Blue Team / Threat Hunter (Junior)
  • Security Operations · Observability-adjacent roles

[ Availability ]
  • Full-time · Remote-first (worldwide)
  • Timezone    : America/Mexico_City (UTC-6) — flexible overlap with LATAM / US / EU-early
  • Languages   : Spanish (native) · English (technical proficient)
  • Start date  : Immediate · Notice period: none

[ Fastest way to reach me ]
  → LinkedIn DM    (usually reply within 24h)
  → See contact badges below

┌──(alejandro㉿sec-ops)-[~]
└─$ cat /etc/motd

"The goal is not to be better than everyone else,
 but to be better than you were yesterday."

Building in public · Documenting every step · Failing forward.