$ whoami

Robert Lynch

SOC Analyst (Tier 1) candidate · Security-Focused IT Support Engineer

I triage endpoint issues to separate user error and misconfiguration from real security events, document them clearly, and write Python to automate the tedious parts. Now moving from MSP support into security operations.

Open to remote SOC & security roles

// about

From support desk to security operations

I'm an IT Support Engineer at an MSP, where I support endpoints for multiple clients across Windows, macOS and Linux. Before that I led a deskside support team at CSX. Much of the job is investigation: working out whether a problem is hardware, the user, a misconfiguration, or something that needs a security review.

I also spent seven years building and maintaining web applications. I've implemented authentication, input validation and role-based access control, so I understand how the systems I'm defending are put together.

I'm earning CompTIA Security+ and a B.S. in Information Technology (Cybersecurity) at Strayer University. Outside work I'm building my own security tools and practicing on Hack The Box.

role
IT Support Engineer
target
SOC Analyst, Tier 1
location
Florida · Remote
cert
NinjaOne Certified
studying
CompTIA Security+
degree
B.S. IT (Cyber), 2028

// projects

Security projects

email security

Phishing Email Analyzer

Triages a saved email: checks SPF/DKIM/DMARC, look-alike sender domains, links that lie about their destination and risky attachments, then outputs a verdict, defanged IOCs and next steps.

PythonSPF/DKIM/DMARCIOCsMITRE T1566
View on GitHub →
log analysis

Windows Event Analyzer

Parses Windows Event Logs and surfaces security-relevant activity, such as failed logons and account changes, in a readable summary.

PythonEvent Logstriage
In development
network

Network Triage Tool

Gathers a host's network connections and configuration in one pass to speed up first-response investigation.

PythonnetworkingIR
In development
automation

Log Analysis Scripts

Parse authentication and system logs, extract key indicators and output structured results ready for investigation.

Pythonauth logssyslog
In development
hardening

Linux Security Hardening

Baseline controls for Linux hosts: SSH configuration, file permissions and account policies.

LinuxBashSSH
In development

// development background

web app

Day Trip Planner Marketplace

Full-stack PERN app (PostgreSQL, Express, React, Node) with full user authentication, tiered packages and a customer newsletter. Built at DevMountain.

ReactNodePostgreSQLauth
web

WordPress & WooCommerce Builds

Seven years of custom themes, plugin maintenance and deprecated-code cleanup for client stores, with secure practices built in.

PHPWooCommerceSEO

// experience

Where I've worked

Information Technology Support Engineer · AdvanTech

Aug 2026 – Present · Gainesville, FL (Hybrid)

  • Support endpoints for multiple managed clients across Windows, macOS and Linux.
  • Monitor device health and respond to alerts in NinjaOne RMM; work and escalate tickets in HaloPSA.
  • Apply hardening controls and configuration baselines; keep client documentation current in Hudu.

Deskside Support Team Lead · CSX

Oct 2025 – Aug 2026 · Jacksonville, FL

  • Led the deskside support team and mentored technicians on troubleshooting and escalation.
  • Investigated endpoint issues to separate hardware failure, user behavior, misconfiguration and possible security events.
  • Reviewed system logs and documented incidents to improve ticketing and escalation workflows.

Full-Stack Developer · Produced By Deuce, LLC

Feb 2018 – Oct 2025 · Remote

  • Built and maintained WordPress/WooCommerce sites, custom themes and plugins.
  • Applied input validation, authentication, session management and RBAC; contributed Python components.

Frontend Developer · Premium Peanut

Mar 2022 – Jul 2022 · Douglas, GA (Remote)

  • Added stricter input validation and safer data flows to internal applications.

// skills

Toolkit

security ops

  • Alert triage
  • Log analysis
  • Phishing analysis
  • Incident documentation
  • System hardening

systems & network

  • Windows · macOS · Linux
  • TCP/IP, DNS, DHCP
  • Wireshark
  • Microsoft 365
  • Active Directory basics

tools

  • NinjaOne RMM
  • HaloPSA
  • Hudu
  • Git / GitHub
  • Docker · AWS

code

  • Python
  • Bash
  • JavaScript · Vue · React
  • SQL
  • Secure auth & RBAC

// credentials

Certifications & education

earned

NinjaOne Certified Technician | MSP

Aug 2026 · valid through Aug 2027

in progress

CompTIA Security+

Currently studying

in progress

B.S. Information Technology, Cybersecurity

Strayer University · expected Mar 2028

completed

Full-Stack Web Development

DevMountain · 2021

// contact

Let's talk

I'm looking for remote SOC Analyst and security-focused support roles. The fastest way to reach me is email.