01 SOC · Incident response · Active defense

Defending complex
systems with clarity.

I’m Shalva, a Security Operations Center Analyst (L2) based in Tbilisi. I turn security telemetry into decisive action—tuning detection, investigating threats, and strengthening enterprise environments.

PROFILE / 001TBILISI, GE
Portrait of Shalva Lekishvili
L2SOC ANALYST
2.9YEARS @ ITCRAFT
CURRENT FOCUSThreat hunting
SECURITY POSTUREActively monitored
41.7151° N
44.8271° E
Scroll to explore
IT SUPPORTCYBERSECURITYNETWORKINGLINUXWEB SYSTEMS IT SUPPORTCYBERSECURITYNETWORKINGLINUXWEB SYSTEMS
02 / ABOUT

A little context

From first response to active defense.

I bridge deep technical analysis and security strategy—translating noisy telemetry into clear decisions.

At ITCraft, I work across advanced SIEM tuning, event correlation, automated threat pre-processing, enterprise incident response, and multi-vendor network perimeters. My offensive-security mindset helps me investigate how an attack works, not only where it appeared.

My foundation was built in frontline IT support and team leadership at International Black Sea University. That experience still shapes how I operate: stay calm, communicate clearly, find the root cause, and leave the system stronger than before.

BAInformation
Technologies
L2Security operations
analyst
14Professional
certifications
03 / EXPERTISE

How I create value

Technical depth.
Human clarity.

01

Detection & SIEM

Advanced log analytics, event correlation, detection tuning, and automated threat pre-processing pipelines.

SIEMTelemetryAutomation
02

Incident Response

Escalation handling, root-cause analysis, playbook development, threat hunting, and active defense.

IRThreat huntingPlaybooks
03

Infrastructure Security

Risk-aware protection across critical endpoints, multi-vendor firewalls, networks, and Linux environments.

FirewallsEndpointsLinux

TOOLBELT / CAPABILITIES

SIEM Tuning AdvancedIncident Response L2Networking Strong Threat Hunting ActiveInformation Security CoreLinux Strong IT Operations 2+ yearsCommunication Team lead
04 / SELECTED WORK

Professional trajectory

Built in support.
Focused on defense.

A progression from frontline technical operations to security leadership, investigation, and enterprise defense.

01MAR 2026 — NOW

ITCRAFT · TBILISI

SOC Analyst (L2)

Monitoring and investigating enterprise threats, tuning SIEM platforms, improving telemetry correlation, managing escalations, and supporting automated response workflows.

SIEM    TUNED
THREATS HUNTED
RESPONSE ACTIVE
02SEP 2025 — MAR 2026

IBSU · ITCRAFT

IT Support Team Lead

Led university support operations while coordinating technical resolution, end-user service, systems continuity, and communication across a busy academic environment.

03NOV 2023 — MAR 2026

ITCRAFT · IBSU · CAUCASUS UNIVERSITY

IT Support Specialist

Diagnosed hardware, software, network, and user-access issues while maintaining reliable services and building the operational foundation for a move into cybersecurity.

05 / CREDENTIALS

Verified learning

Knowledge built
layer by layer.

01

AOC 2025

TryHackMe · Issued Dec 2025

THM-EGTUQF4CAI
02

Cyber Threat Intelligence

TryHackMe · CISA JCDC Triage Fusion and Analysis · Nov 2025—Nov 2035

THM-JVR3U2HPKS
03

Security Engineer

TryHackMe · Sep 2025—Sep 2028

THM-2MWEFSMO18
04

SOC Level 1

TryHackMe · Sep 2025—Sep 2030

THM-YHFGKSGY28
05

SOC Level 2

TryHackMe · Sep 2025—Sep 2030

THM-TH8U8ODRGS
06

Offensive Pentesting

TryHackMe · Sep 2025—Sep 2030

THM-O5YB6D7QMZ
07

Web Fundamentals

TryHackMe · Sep 2025—Sep 2028

THM-Y05LJ9JOTY
08

CompTIA Pentest+

TryHackMe · Sep 2025—Sep 2028

THM-JSEWACT2EY
09

Jr Penetration Tester

TryHackMe · Sep 2025—Sep 2030

THM-DFCKXEC7AT
10

Red Teaming

TryHackMe · Sep 2025—Sep 2030

THM-HEX0VWNFTS
11

CompTIA Pentest+ (Ethical Hacking)

Udemy · Issued Sep 2024

UC-52657340-629d-4b45-8a67-31b6d8a791d5
12

GIS Solutions for Telecommunications

SuperMap GIS · Issued Nov 2021

SUPERMAPP GIS
13

Fundamentals of Computer Hacking

infySEC · Issued Jun 2021 · Ethical Hacking

INFYSEC
14

Cybersecurity & Ethical Hacking

Georgian Project Andromeda · Issued Oct 2020

ANDROMEDA

Need sharper security operations?

Let’s build something
reliable.

lekishvilishalva@gmail.com

Open to security operations, incident response, and infrastructure opportunities.

LinkedIn ↗Facebook ↗Instagram ↗