Professional profile
Nurzhan Bekmurat
Junior Cybersecurity Specialist
Penetration Testing & SOC Analysis
Astana, Kazakhstan · Open to Junior Penetration Tester and Junior SOC Analyst roles
Profile
I combine CTF practice and blue-team labs with software development. I focus on understanding system behaviour, documenting evidence and explaining findings clearly.
Skills and practice
- Security labs: web application testing, email triage, static executable analysis, OSINT and CTF problem solving.
- Tools: Python, Linux, Burp Suite, Nmap, Wireshark and Git.
- Development: Django, PostgreSQL, TypeScript, Next.js and Python/Pygame.
Selected work
A bank alert that did not add up. — Reconstructed a supplied email’s route, compared sender identities and separated authentication results from evidence of phishing.
Inspect first. Execute nothing. — Used PEStudio to inspect a supplied curl.exe sample and explain its PE structure, imports and entropy without overstating the verdict.
Lost & Found — A Django and PostgreSQL application for reporting and finding lost items, with accounts, photos and comments.
StarJump — My 2024 college graduation project, rebuilt for browser play with touch controls and an offline Android preview.
Education
Information Systems — college graduate, 2024.
Cybersecurity education — Astana IT University, in progress.
Selected learning credentials
- Junior Cybersecurity Analyst Career Path — Cisco, learning badge.
- Penetration Testing, Threat Hunting, and Cryptography — IBM, course completion certificate.
- Hands-On Web App Pentesting — Packt, course completion certificate.
- Linux Essentials — Cisco, learning badge.