Skip to content
View magda-uk's full-sized avatar

Highlights

  • Pro

Block or report magda-uk

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
magda-uk/README.md

Magda Dominguez Specialties

Target Role: Cyber Security Analyst | SOC / Blue Team | Security Design & AppSec
Certifications: BCS CISMP | Microsoft SC-900
Location: Bristol, UK (Hybrid / Remote)

I am a detail-oriented cybersecurity professional based in the UK, specialising in Blue Team operations, telemetry analysis, and application security. With a strong background in Software & Data Engineering and Perpetual Inventory within high-volume logistics, I bring a meticulous, evidence-based approach to investigating anomalies, tracing attack timelines, and separating noise from true positive alerts.


▫️Current Focus

Focus Microsoft Security Detection Engineering Log Analysis BLT1 Frameworks MITRE ATT&CK STRIDE

Actively building Blue Team, SOC Analyst, and Security Design skills while preparing for Microsoft SC‑200 and BTL1.

  • Detection Engineering: Wazuh SIEM, Microsoft Sentinel, Sigma Rules.
  • Endpoint Telemetry: Sysmon, Windows Event Logs, PowerShell Logging.
  • Identity & Access: Authentication triage in Azure AD / Entra ID.
  • AppSec & Threat Modelling: STRIDE, OWASP API Security Top 10, Low-Level Design (LLD) remediation.

▫️Cybersecurity & Tech Stack

Wazuh Microsoft Sentinel Sigma KQL Endpoint Telemetry Sysmon PowerShell Logging Windows Event Logs Azure AD / Entra ID Networking Wireshark

🔺 Featured Repositories


▫️Software, Data Engineering & AppSec

Python Database APIs OWASP Burp Suite Postman

My background in software and data engineering allows me to analyse vulnerabilities at the code level, enforce relational data integrity and understand the underlying architecture of the systems I defend.

  • ➜ Shelfie Security Audit & Remediation Playbook: Penetration testing report, STRIDE/MITRE ATT&CK threat model, and secure code remediation (@token_required JWT RBAC, Pydantic validation, Flask-Limiter, MySQL Least Privilege).

  • ➜ CDC Inventory & Physical Audit Database: A 3NF relational database (MySQL) engineered to detect operational stock drift, enforce role-based data constraints, and automate discrepancy & anomaly triage via multi-table JOINs, VIEWs, and Stored Procedures.

  • ➜ SecurePass: A Flask-based REST API with MySQL, engineered with core security principles (input validation, secure authentication).

  • ➜ Shelfie (Core Application): Collaborative four-layer digital library REST API built with Python and MySQL, demonstrating backend architecture, Agile/Jira leadership, and automated testing.


▫️ Education & Certifications

  • +Master in Cyber Security – Code First Girls (Aug 2026)
  • CFGdegree in Software and Data Engineering – Code First Girls (Jul 2026)
  • Level 3 Skills Bootcamp in Cybersecurity – Aspire2Be (Jan 2026)
  • CISMP – BCS Certificate in Information Security Management Principles
  • SC-900 – Microsoft Security, Compliance, and Identity Fundamentals

▫️ Let's Connect

Magda Dominguez LinkedIn

Pinned Loading

  1. soc-analyst-showcase soc-analyst-showcase Public

    Hands-on SOC analyst portfolio: translating a logistics and data reconciliation mindset into Blue Team threat triage, log analysis, and detection engineering.

    1

  2. soc-analyst-portfolio soc-analyst-portfolio Public

    Hands-on SOC Analyst L1 portfolio. Detection engineering, log analysis, KQL, investigations and Blue Team labs.

    Python 1

  3. shelfie-security-audit shelfie-security-audit Public

    Application security audit, vulnerability assessment (OWASP API Top 10, STRIDE), and LLD risk remediation playbook for a Python/Flask REST API.

    2

  4. phishing-incident-response-lab phishing-incident-response-lab Public

    Focus: End-to-end phishing incident response, header analysis, and malicious artifact triage.

    Python 1

  5. inventory-audit-database inventory-audit-database Public

    Relational database in MySQL designed to tackle inventory stock drift and reconcile warehouse management records with physical audit checks.

    SQL

  6. secure-building-aaa-framework secure-building-aaa-framework Public

    Python Flask REST API simulating a physical access control system based on the AAA (Authentication, Authorization, and Accounting) cybersecurity framework.

    Python 1