IT PROFESSIONAL · SECURITY+ CERTIFIED · FIRST-GENERATION GRADUATE
IT professional with deep roots in cybersecurity and digital forensics. I build, support, troubleshoot, and improve systems that keep people productive and data secure.
ABOUT JONATHAN
I have supported users and systems in healthcare, higher education, and school environments. My work includes endpoint deployments, break/fix troubleshooting, Active Directory support, patching, hardware replacement, documentation, SOC training, and formal forensic reporting.
More about me →SERVICE AREAS
My work sits between practical managed IT services and security-focused operations: keeping users productive, systems maintained, infrastructure documented, and suspicious activity visible.
Endpoint deployment, break/fix, Active Directory, patching, rooms, peripherals, networking, and infrastructure.
Explore IT operations → 02SOC workflows, Wazuh, Splunk, detection, incident response, monitoring, and investigations.
Explore security operations → 03Disk, memory, cloud, browser, email, network, artifact correlation, timelines, and formal reports.
Explore forensic work → 04Custom systems, upgrades, water cooling, no-POST diagnosis, Linux servers, containers, and validation.
Explore systems work →COMMONWEALTH UNIVERSITY SOC LAB
The Commonwealth University–Bloomsburg SOC Lab gave me hands-on practice inside a complete security-operations workflow. Wazuh was the main platform. Across roughly 20 simulated cases, I triaged multiple alert types, correlated endpoint and network evidence, mapped observed behavior to MITRE ATT&CK, and wrote formal containment procedures for the incident-response handoff.
FEATURED WORK
Start with the quick overview, then open the full technical breakdown for the environment, actions, evidence, troubleshooting, findings, and limitations.
Triaged about 20 simulated cases in a Wazuh-centered environment, mapped procedures to MITRE ATT&CK, preserved evidence, and prepared formal containment documentation for incident-response handoffs.
Read the SOC Lab breakdown →Built an isolated three-VM environment, collected Windows telemetry, wrote a custom rule, mapped activity to MITRE ATT&CK, and validated six alerts.
Read case study → INCIDENT RESPONSECorrelated remote access, privilege changes, PowerShell, network activity, data movement, and log clearing across six evidence sources.
Read case study → EMAIL & NETWORK FORENSICSConnected email headers, IP and MAC data, packet evidence, sessions, and user-agent details while keeping attribution limits clear.
Read case study →REAL WORK UNDER PRESSURE
A missed BIOS setting affected a 130-computer rollout. I helped prepare and swap roughly 100 replacement systems while the original devices were corrected, reimaged, encrypted, labeled, and validated.
Read the full story →We deployed mobile workstation and projector carts, isolated wireless connections, hotspots, and backup power so scheduled events could continue without normal building infrastructure.
Read the full story →During the 2021 renovation, I helped trace, reroute, extend, reconnect, and test Ethernet, audiovisual, power, projector, display, and room-control cabling. I also assisted with two switch installations and validated rooms designed to split or combine.
Read the full STAR story →I handled roughly 10–20 password resets and account unlocks per week for students and technology employees, verified users, updated approved staff access, forced policy refreshes, and confirmed resource access before closing the request.
Read the full STAR story →CONTINUED SOC TRAINING
The university SOC Lab gave me the workflow. TryHackMe and focused Splunk training gave me more datasets, more alert patterns, and more chances to practice the searches behind the investigation.
I have completed more than 65 guided and challenge-based labs covering SOC analysis, log review, incident response, phishing, Windows and Linux activity, network traffic, and digital forensics. I use the platform to reinforce concepts by working through evidence instead of only reading about them.
stats, eval, table, dedup, regex, and field selectionCOMMONWEALTH UNIVERSITY–BLOOMSBURG
My degree combined digital investigations, system security, network analysis, incident response, and formal technical reporting. I also worked through the university SOC Lab workflow under Dr. Atdhe Buja, moving from alert review to enrichment, endpoint evidence, case tracking, correlation, and reporting.
The program page covers the Digital Forensics and Cybersecurity B.S. curriculum. The SOC Lab article explains the networked environment, analyst and incident-response roles, NIST alignment, controlled attack scenarios, endpoint forensic work, and the full detection-to-reporting workflow supervised by Dr. Buja.
EDUCATION & CREDENTIALS
Commonwealth University of Pennsylvania–Bloomsburg, May 2026. Minor in Arabic Studies. CompTIA Security+ earned June 2026.
MORE ABOUT ME
The About page covers my background, PC building, powerlifting, the outdoors, gaming, and the dogs without crowding the professional sections.
Open About MeCONTACT
Reach me directly at jonathanlunger00@gmail.com. A full website message form is still a work in progress, so direct email is the reliable option for now.
