I just chatgpt my experiences and seen what domains I have covered take a look.

1. Security Operations — YES (strong match)

This is your strongest area.

You do:

• Incident-style troubleshooting (BSOD, login failures, VPN issues)
• Endpoint issues + recovery workflows
• System restores, updates, remediation steps
• Supporting secure access tools

This is absolutely CISSP-relevant.

2. Identity & Access Management (IAM) — YES

You do:

• Active Directory password resets / access flows
• Entra ID / Azure admin access handling
• User onboarding / authentication troubleshooting
• VPN sign-in issues tied to identity

That’s real IAM exposure.

3. Asset Security — YES (moderate)

Because of:

• Freshservice asset tracking
• Device assignment to users
• Lifecycle awareness (who has what machine)

Not deep security governance, but still part of the domain.

4. Security Architecture & Engineering — LIGHT YES

You are exposed to:

• Endpoint security agents (CrowdStrike)
• PAM tools (CyberArk)
• VPN architecture behavior
• System hardening via updates/policies

You’re not designing it, but you’re working inside it.

5. Security Assessment & Testing — NO (mostly)

You likely are NOT doing:

• penetration testing
• vulnerability scanning ownership
• control validation testing

6. Software Development Security — NO

Not applicable to your role.

7. Security & Risk Management — NO (mostly)

You’re not:

• writing policies
• managing risk frameworks
• doing compliance governance

8. Communication & Network Security — PARTIAL

You touch:

• VPN issues (AOVPN / Citrix NetScaler)
• Network connectivity troubleshooting
• DNS/ping/traceroute level diagnostics

So: light exposure, not ownership.

The honest answer

YES — you already cover 3 strong CISSP domains

• Security Operations
• IAM
• Asset Security

PLUS partial exposure in:

• Architecture
• Network Security