Investigation Workflow
Reviewed security evidence, identified relevant activity, separated signal from noise, and documented findings in a structured analyst format.
Program Overview
Cyber Defense Analyst Program and CDCP Capstone
I completed the Level Effect Cyber Defense Analyst Program and earned the Cyber Defense Certified Professional credential through a practical capstone assessment. The program focused on applied security operations skills rather than passive course completion, with emphasis on analyst workflow, evidence review, threat investigation, technical reporting, and defensive operations.
For my portfolio, this credential is important because it connects my enterprise IT and network support background to practical security operations work. It demonstrates that I have worked through analyst-style tasks involving endpoint evidence, network traffic, Linux command-line workflows, log analysis, threat intelligence, vulnerability context, and incident reporting.
What It Demonstrates
Practical Security Operations Skills
Endpoint and Log Analysis
Used Windows, Linux, and security-event evidence to support triage, investigation, and incident analysis.
Network Traffic Review
Reconstructed network activity from packet and traffic evidence using analyst tools and repeatable investigation methods.
Threat Intelligence
Researched indicators, assessed relevance, and incorporated outside intelligence into written security findings.
Reporting and Communication
Produced clear written deliverables explaining observations, evidence, conclusions, and recommended next steps.
SOC Relevance
Built practical experience aligned to SOC Analyst, NOC, network support, systems support, and security operations responsibilities.
Capstone Deliverables
Report-Based Practical Assessment
The CDCP capstone required practical analysis and written reporting across multiple cyber defense scenarios. These deliverables are not posted publicly because they contain Level Effect intellectual property, assessment material, and restricted training content.
Capstone reports are available for private review upon request when appropriate for a legitimate hiring, recruiting, or professional evaluation context. Publicly, I summarize the skills demonstrated by the capstone without redistributing protected Level Effect material.
Security Investigation Reports
Analyst-style reports documenting evidence, findings, interpretation, and recommended response actions.
Network and Packet Analysis
Review of network activity and traffic evidence to identify behavior, context, and potential security relevance.
Linux and Log Triage
Command-line investigation workflows using Linux tools to review logs, artifacts, and supporting evidence.
Threat Intelligence Review
Indicator research, contextual enrichment, and written assessment of potential malicious activity.
Credential Criteria
Earning Criteria Summary
The earning criteria image below is included as supporting context, not as the main evidence. The main value of this page is the explanation of what the program and capstone demonstrate in practical terms for employers.
The credential supports my candidacy for security operations and adjacent infrastructure roles because it required practical cyber defense analysis, written reporting, and evidence-based investigation rather than simple course attendance.
Employer Relevance
Why This Matters
The CDCP complements my enterprise network and support operations background by demonstrating how that troubleshooting foundation applies to security monitoring, triage, investigation, and incident communication.
For hiring managers, this credential should be viewed alongside my hands-on lab work in Elastic, Wazuh, Sysmon, Windows/Linux telemetry, packet analysis, and automation. The value is not the badge by itself; the value is the practical analyst workflow, documentation discipline, and security operations judgment developed through the program and capstone.