Anoop
Ambrose_

THE PERSON BEHIND THE TERMINAL

Curious about the attack.
Committed to the defence.

I find security weaknesses. I understand the threats. I work towards stronger defences.

I'm Anoop Ambrose, a Penetration Tester and Cybersecurity Practitioner passionate about understanding how systems are attacked and how they can be better protected.

My journey in cybersecurity started with offensive security, where I developed an interest in penetration testing, vulnerability assessment, web application security and network security. I enjoy exploring systems, identifying potential weaknesses and understanding the risks they create.

Today, I'm taking that knowledge further by developing my skills in Security Operations Centre (SOC) operations. I'm working with SIEM technology, particularly Splunk, to understand how security events are collected, monitored, investigated and turned into meaningful security insights.

I'm also building a hands-on SOC lab where I simulate security activities, collect endpoint logs from Windows and Linux systems, and investigate the resulting telemetry. This helps me understand both sides of a security incident: how an attack happens and how a defender can identify it.

What I bring to the table

• Offensive security perspective: I approach systems with an attacker's mindset to identify weaknesses and understand potential risks.
• Defensive security development: I'm building practical experience in SIEM monitoring, log analysis, threat detection and incident investigation.
• Analytical thinking: I focus on understanding the evidence, investigating the cause and communicating technical findings clearly.
• Continuous learning: I take initiative in building labs, testing tools and documenting what I learn.

Why work with me?

I bring curiosity, a practical mindset and an interest in both offensive and defensive security. Rather than looking at vulnerabilities in isolation, I want to understand their real-world impact, how they can be detected and what can be done to reduce risk.

My goal is to help organisations better understand their security weaknesses, recognise potential threats and build stronger defences.

I'm always open to cybersecurity opportunities, collaboration and learning from professionals in the industry.

My interests span security monitoring, SIEM workflows, alert triage, Linux and Windows telemetry, incident investigation, web application security and clear technical reporting. I value practical evidence over unsupported claims — build a lab, reproduce an activity, inspect the logs and document what happened.