Systems Administration
Linux and Windows Server administration, service management, access controls, PowerShell scripting, IIS, backups, troubleshooting, and documentation.
OPEN TO IT INFRASTRUCTURE & SECURITY OPPORTUNITIES
LINUX & WINDOWS SYSTEM ADMINISTRATOR · CYBERSECURITY · OSINT · AI & AUTOMATION
Building reliable systems.
Understanding the risks.
I'm Vitalii Balint, an IT professional with hands-on experience in Linux and Windows infrastructure, web services, troubleshooting, and security-focused technical projects.
infrastructure / overview● CONNECTED
SYSTEM STATUS
✓
OperationalMonitoring · Analysis · Response
Linux host
ONLINE
Windows endpoint
ONLINE
SIEM pipeline
ACTIVE
$ systemctl status monitoring ● active (running) $ inspect --logs --events → review → investigate → document
SECURITY LAB / ACTIVE LEARNING
Linux & WindowsServer administration
SIEM / WazuhSecurity monitoring lab
Defensive OSINTEvidence-based research
Web InfrastructureDNS · TLS · Troubleshooting
01 / ABOUT
Technical depth.
Practical thinking.
I focus on understanding how systems work, keeping services available, investigating issues, and documenting repeatable solutions.
My background spans system administration, web infrastructure, databases, and technical problem-solving. My current portfolio highlights practical lab work in security monitoring and a public-source OSINT framework.
I approach technical incidents by checking logs, verifying service health, isolating the cause, applying a measured fix, and validating the outcome.
Let's discuss your infrastructure needs ↗“
Observe first. Verify evidence. Fix the root cause. Document the result.
MY WORKING APPROACH02 / EXPERTISE
What I work with.
A practical toolkit built around infrastructure, security visibility, and dependable operations.
Security & Monitoring
Log review, endpoint visibility, alert triage, firewall fundamentals, and defensive incident investigation.
Web & Network Services
Web server operations, DNS, HTTPS/TLS, PHP applications, databases, and connectivity diagnostics.
Automation & Research
Local LLM experimentation with Qwen and LM Studio, Hermes integration experiments, Python/PowerShell scripting, repeatable investigations, and technical reporting.
03 / CYBERSECURITY
Security through visibility.
Practical defensive security work: understand the environment, review evidence, investigate alerts, and document findings.
DEFENSIVE SECURITY / LAB-BASED PRACTICE
From event collection to informed response.
I combine systems administration experience with hands-on security learning. My Wazuh lab supports exercises in agent connectivity, event review, and security monitoring. My Hermes framework explores public technical evidence through passive OSINT workflows.
Observe→Investigate→Validate→Document
Explore security projects ↗
01
SIEM & Log Analysis
Wazuh lab deployment, endpoint event collection, alert review, and investigation practice.
02
Linux & Server Hardening
Access control, SSH, firewall configuration, service health checks, and reviewing logs for unusual activity.
03
Incident Investigation
Structured troubleshooting: identify affected services, preserve relevant evidence, isolate the issue, and validate remediation.
04
Defensive OSINT & Exposure Review
Passive research into DNS, TLS certificates, domain metadata, and reputation signals, with explicit confidence and source limitations.
Scope: hands-on labs, independent projects, and systems operations experience. These descriptions do not imply commercial SOC employment, penetration testing engagements, or third-party security guarantees.
04 / SELECTED PROJECTS
Hands-on projects.
Real technical exercises and projects, described without unsupported production claims.
FEATURED / CYBERSECURITY ENGINEERING
AI-ASSISTED SOC · MANUAL LAB
WAZUH→PYTHON→QWEN
152 / 152ALERT IDS VERIFIED
31OFFLINE TESTS
SSH / TLS · SQLITE · JSON CONTRACT · GITHUB CI
PROJECT 01 FEATURED ENGINEERING CASE STUDY
AI-Powered SOC Lab
I built a defensive SOC proof of concept that ingests Wazuh alerts through OpenSearch, runs bounded local Qwen triage, validates model outputs, and stores analyst-reviewable incident reports. CI caught and helped fix a genuine read-only guardrail bug.
Manual, isolated security lab. No autonomous remediation or production SOC claims.
HERMES / DOMAIN INTELLIGENCE
ta551.infoDNSTLSRDAPReputation
PROJECT 01 DEFENSIVE RESEARCH
Hermes OSINT Framework
A public-source domain investigation workflow for DNS records, certificate transparency, hosting signals, and reputation context. Results are collected as evidence and documented with confidence and limitations.
43evidence records*
12sources attempted*
0malicious VT detections*
* Figures from a project report dated October 10, 2026; some sources were unavailable or limited. They are not a claim of comprehensive security assurance.
View 5 real Hermes screenshots →SECURITY OPERATIONS / HOME LAB
SECURITY MONITORING● LAB
Ubuntu SIEMUbuntu EndpointEvent Review
PROJECT 02 SIEM LAB
Wazuh Infrastructure & Endpoint Monitoring
The infrastructure foundation of my AI-SOC-Lab: Ubuntu-based Wazuh Manager and Agent deployed in VMware, event collection, dashboard investigation and endpoint visibility. See the featured AI-SOC case for the Python and local LLM pipeline.
View details and evidence →INFRASTRUCTURE / TROUBLESHOOTING
$ systemctl status nginx
● active (running)
$ journalctl -u nginx
logs → inspect → verify
$ dig +short example.com
DNS response received
PROJECT 03 INFRASTRUCTURE
Linux & Web Operations
Hands-on administration patterns for web services: configuration checks, logs, process status, DNS resolution, SSL/TLS verification, and troubleshooting.
View details and evidence →LOCAL AI / VIRTUALIZATION LAB
LOCAL AI WORKFLOW
MODELQwen
RUNTIMELM Studio
INTEGRATIONHermes ↔ Local API
ENVIRONMENTWindows + Kali VM
> test · inspect · iterate_
PROJECT 04 AI & AUTOMATION LAB
Local AI & Automation Lab
Experimenting with local Qwen language models through LM Studio on Windows, alongside Hermes in a Kali Linux virtual machine. Exploring local model endpoints, assistant configuration, repeatable research workflows, and the practical limits of AI-assisted technical work.
AI-Assisted Security Review — Claude Free vs Kimi Free
An informal comparison of two free AI assistants reviewing my open-source SOC lab. Both raised questions about alert ingestion and safety; see their original reports and the side-by-side comparison. This is not a live-system security certification.
An active personal lab. No claim of a production AI deployment, autonomous SOC, or completed commercial integration.
Explore Local AI & Automation →WINDOWS SERVER / OPERATIONS
ServicesPowerShellIISAccess
PS> Get-Service | Where-Object Status -eq 'Running'
Maintain · Diagnose · Document
PROJECT 05 ADMINISTRATION EXPERIENCE
Windows Server Administration
Practical Windows Server operations experience including system configuration, IIS, PowerShell, service troubleshooting, access management, and technical documentation. Presented as professional skills, not as a newly claimed standalone lab deployment.
View details and evidence →REAL LAB SCREENSHOTS
See the actual work.
Original screenshots from Hermes, Wazuh, Python and Qwen lab exercises — not design mockups.
05 / VERIFIED LEARNING
Credentials that count.
Eight Cisco Networking Academy digital badges shown on Credly, supported by hands-on IT and security practice.
Cisco Ethical Hacker
Networking Academy · Verified badge · Issued Oct 5, 2026
Cisco Junior Cybersecurity Analyst Career Path
Networking Academy · Verified badge · Issued Oct 2, 2026
Cisco Endpoint Security
Networking Academy · Verified badge · Issued Sep 30, 2026
Cisco Linux Unhatched
Networking Academy · Verified badge · Issued Sep 29, 2026
Cisco Networking Basics
Networking Academy · Verified badge · Issued Sep 28, 2026
Cisco Networking Devices and Initial Configuration
Networking Academy · Verified badge · Issued Sep 28, 2026
Cisco Introduction to Modern AI
Networking Academy · Verified badge · Issued Aug 9, 2026
Cisco Introduction to Cybersecurity
Networking Academy · Verified badge · Issued Mar 11, 2026
Additional training: GoIT Cybersecurity (2024). Verify all 8 Cisco badges on Credly ↗
06 / EDUCATION
Academic background.
Three Ukrainian education credentials documented in extracts from Ukraine’s Unified State Electronic Database on Education (EDEBO).
2011
Specialist Diploma
Information Management Systems and Technologies
Transcarpathian State University · Ukraine
Professional qualification: Systems Engineer and Computer Science Teacher
2010
Bachelor's Diploma
Computer Science
Transcarpathian State University · Ukraine
2005
Junior Specialist Diploma
Programming for Electronic Computing Equipment and Automated Systems
Natural Sciences and Humanities College of Transcarpathian State University · Ukraine
Professional qualification: Programmer
U.S. credential evaluation: These credentials were earned in Ukraine and are documented in the Ukrainian education registry. A formal U.S. credential equivalency evaluation has not yet been completed. No U.S. degree equivalency is claimed.
07 / CONNECT
Let's build something
reliable.
Interested in infrastructure, systems administration, security operations, or technical collaboration? Get in touch by email, LinkedIn, or GitHub.