University of Staffordshire · BSc (Hons) Cyber Security

Armen Pop
Cybersecurity Student

Building secure systems through access control design, risk management, and GDPR-aligned thinking — seeking a graduate role in SOC analysis or security operations.

01

About Me

Hi, I'm Armen Pop and I am a fourth year student studying Cyber Security at University of Staffordshire.

I've always known I wanted to specialise and build my career around technology, that's when I found Cyber Security and ever since then I have been obsessed; to be on the journey to join the Red Team and become a Penetration Tester.

My main inspiration to become a penetration tester was jailbreaking and then modding old consoles such as the original Nintendo Wii. This interest then evolved into a career prospect in secondary school when I took up computer science.

02

Professional Profile

Motivated Cybersecurity student at University of Staffordshire with hands-on experience designing secure systems, access control architectures, and risk management frameworks through academic and real-world project work.

Demonstrated ability to apply GDPR compliance thinking, threat analysis, and security design principles in a team environment.

Currently seeking a graduate role in cybersecurity — specifically SOC analysis or security operations — where I can develop technical skills alongside experienced professionals.

Location
United Kingdom
Studying
BSc (Hons) Cyber Security
Institution
University of Staffordshire
Focus areas
Access control, risk management, GDPR
🎯 Targeting: SOC Analyst / Security Operations
03

Education

2023 — Present
BSc (Hons) Cyber Security
University of Staffordshire
Professional Practice & Project Management Network Security Operating Systems Security Ethical Hacking Principles
Completed 2023
A-Levels
Mathematics · Computer Science · Physics
04

Key Projects

COMP50074 · Professional Practice & Project Management · Group 4 · 2025–2026
Home First — Secure Service User & Staff Portal

Led the solution proposal and technical development for a cloud-based portal designed for a care organisation handling sensitive personal data across multiple stakeholder groups.

Role-Based Access Control — Four-Tier Model (Least Privilege)
Office Manager
Administrative oversight & reporting
Field Staff
Client visit & task-level access
Service User
Own-record visibility only
System Admin
Full platform configuration
UK GDPR Article 32 Specified Multi-Factor Authentication and end-to-end encryption controls aligned to security-of-processing requirements.
UK GDPR Article 5 Applied data minimisation principles across the data migration and system design phases.
  • Produced a risk register with probability/impact ratings and explicit mitigations covering data breach, access control failure, AI misuse, and staff non-compliance
  • Authored a structured security test plan covering functional, security, and user acceptance testing
  • Used a weighted scoring matrix across seven criteria to produce a defensible, evidence-based solution recommendation
University Assessment · Practical CTF Exam
Capture The Flag Exam — Offensive Security Challenge

Completed a practical, exam-conditions CTF requiring flags to be captured across multiple offensive security phases using Kali Linux tooling.

Attack Phases Covered
Reconnaissance
Information gathering
Scanning
Host & service discovery
Enumeration
Identifying attack surface
SQL Injection
Database exploitation
Sniffing
Traffic interception
DDoS
Availability attacks
  • Performed reconnaissance and scanning under exam conditions to identify live hosts, open ports, and running services
  • Captured flags through enumeration and SQL injection exploitation techniques
  • Carried out simulated DDoS and traffic sniffing exercises using Kali Linux tooling in a controlled environment
Personal Project · Self-Directed Home Lab
Home Cybersecurity Lab — Offensive & Defensive VM Environment

Built and manage a self-hosted virtual lab in VMware to practise penetration testing techniques and traffic analysis in a fully isolated environment.

Lab Topology — Attacker / Target Configuration
Kali Linux
Attack host VM
Metasploitable
Deliberately vulnerable target
Windows VM
Target endpoint
VMware
Hypervisor & VM management
Resource Allocation Assigned CPU cores, disk space, and memory per VM so each machine ran reliably without starving the others.
Virtual Networking Configured internal networking so VMs could correctly discover and communicate with one another in isolation from the host network.
  • Used Kali Linux as the attack host against a Metasploitable target to practise penetration testing techniques
  • Simulated red-team style attacks, including DDoS-style traffic, against target VMs in a controlled environment
  • Used Wireshark to capture and analyse traffic generated during simulated attacks
Personal Project · Networking Fundamentals
Network Configuration Lab — Cisco Packet Tracer

Designed and configured simulated LAN/WAN topologies to reinforce the networking fundamentals — routing, addressing, and device connectivity — that underpin firewall rules, segmentation, and access control design.

Topology Components
Routers
Inter-network routing
LAN / WAN Links
End-to-end connectivity
Servers
Network resource hosting
Printers
Shared network devices
  • Connected multiple LAN and WAN segments with correctly configured routers and end devices
  • Verified successful end-to-end packet transfer between devices using Packet Tracer's simulation mode
  • Configured servers and printers to communicate reliably across connected network segments
University Assignment · Web Development Fundamentals
Website Build — HTML, CSS & JavaScript

Designed and built a website from scratch using core web technologies. Understanding how sites are structured and rendered client-side directly supports recognising common web application vulnerabilities such as XSS and SQL injection.

Core Technologies
HTML
Structure & semantics
CSS
Styling & layout
JavaScript
Client-side interactivity
Responsive Design
Cross-device compatibility
  • Structured and styled a multi-page site from scratch using semantic HTML and custom CSS, without a framework
  • Implemented interactive elements using vanilla JavaScript
  • Built practical, first-hand understanding of client-side web architecture — the foundation for spotting how web applications can be exploited
05

Technical Skills

Security

RBAC designApplied
Risk registersApplied
Security test planningApplied
GDPR complianceApplied
MFA specificationApplied
Threat analysisBasic

Networking

TCP/IP · OSI ModelBasic
DNSBasic
FirewallsBasic
VPNsBasic
Client-server architectureBasic

Tools & Platforms

Kali LinuxBasic
NmapBasic
WiresharkIntroductory
MetasploitIntroductory
VMwareBasic
Active DirectoryIntroductory
TryHackMeIntroductory
HackTheBoxIntroductory
XAMPPBasic
VS CodeApplied

Programming & Other

PythonBasic scripting
BashIntroductory
SQLBasic
Technical documentationApplied
Stakeholder reportingApplied
Microsoft Office suiteApplied
06

Work Experience

[Add dates]
Cybersecurity Work Experience — [Add country / organisation]
  • [Write a bullet point about what you did — e.g. tasks, tools used, environment]
  • [Write a bullet point about a skill or outcome from the placement]
2022 — 2023
Sales Associate — Ralph Lauren
  • Delivered high standards of customer service in a fast-paced, high-value retail environment
  • Handled sensitive customer payment and personal data in line with company data protection policy
  • Collaborated with team members to maintain store operations and meet daily targets
2021 — 2022
Sales Associate — Clarks
  • Achieved highest individual sales rate during shifts through active listening and product knowledge
  • Processed customer orders accurately using POS technology under time pressure
2021 — 2022
Bar Staff — Wetherspoons & Horn and Trumpet
  • Managed high-volume, time-critical workloads in a fast-paced hospitality environment
  • Developed strong communication skills when handling difficult situations and diverse customers
07

Certifications & Development

In Progress
CompTIA Security+
Target: December 2026
Pending
CompTIA Network+
Target: 2026/2027
Pending
Google Cybersecurity Certificate
Coursera
Pending
TryHackMe — SOC Level 1 Path
Target: August 2026
Pending
Home Lab: AD with RBAC + MFA
VMware / Windows Server
Building
08

Additional Information

📚 Maths tutor for primary school students 🗣️ Fluent — Armenian (native) & English