Matthew Goehring
Butler
Summary
SOC Analyst with hands-on experience in threat detection, log analysis, and incident triage through IronCircle labs and real-world authentication/security workflows at Armstrong. Skilled in identifying malicious behavior across Windows telemetry, network data, and SIEM logs. Strong working knowledge of Splunk, Sysinternals, Wireshark, and MITRE ATT&CK, with demonstrated ability to analyze MFA-bypass campaigns and produce actionable IOCs and incident reports.
Overview
1
1
year of professional experience
1
1
Certification
Work History
Universal Agent
Armstrong
01.2025 - Current
- Provide Tier 1 remote support for customer networks, diagnosing modem/router issues, and implementing security measures to protect user accounts.
- Perform account management and security tasks, including password resets, access recovery, and securing accounts compromised by unauthorized activity.
- Diagnose and resolve connectivity, performance, and configuration issues across residential networking equipment.
- Document all troubleshooting actions and resolutions in the ticketing system for accurate case tracking and escalation when necessary.
- Key Skills & Tools:
- MoCA Networks
- Ethernet & Wireless Networking
- Account Security & Authentication
- Remote Troubleshooting
- Ticketing & Documentation
- Network Assessments
Desktop Support
Mortgage Connect
10.2024 - 10.2024
- Imaged and configured laptops and desktops for end-user deployment, Performed user account setup and provisioning tasks.
- Deployed and set up hoteling workspaces to support employee transitions.
- Reconfigured switch ports to ensure proper network connectivity, Conducted virus scans and basic malware remediation to maintain system security.
- Key Skills & Tools:
- Desktop Imaging
- Switch Port Configuration
- Windows User Account Setup
- Asset Management
- Endpoint Security
Education
Highschool Diploma -
PA Cyber
Pennsylvania01.2020
Skills
- SIEM & Logging: Splunk, Sysmon, Event Viewer, AWS CloudTrail
- Endpoint & Forensics: Sysinternals (ProcMon, Process Explorer, Autoruns, TCPView), Wireshark
- Threat Detection: Malware behavior analysis, C2 pattern recognition, IOC creation, rule/signature development
- Incident Response: Process tree reconstruction, log forensics, ATT&CK mapping, containment & remediation support
- Network Tools: Nmap, netstat, traceroute, MoCA diagnostics
- Cloud Security: AWS IAM, S3 permissions, EC2, VPC security groups, misconfiguration analysis
- Security Architecture: Hardening, vulnerability assessment, baseline security controls
- OS & Virtualization: Windows (client/server), Linux (Ubuntu/Debian), VMware, VirtualBox, Kali Linux
- Scripting & Automation: PowerShell, Bash
- Frameworks: MITRE ATT&CK Navigator, Markdown/GitHub documentation
Certification
- IronCircle Certified Cybersecurity Analyst 2025-10-24
- Microsoft Certified IT Support Specialist Professional 2025-09-08
Timeline
Universal Agent
Armstrong
01.2025 - Current
Desktop Support
Mortgage Connect
10.2024 - 10.2024
Highschool Diploma -
PA Cyber