Skip to main content
< SOC & Incident Response />

EREN ONDER

I'm a

I'm Eren ONDER, a Junior Cyber Security Specialist working on critical national infrastructure. I cover the full SOC workflow on Splunk and IBM QRadar — from alert triage through SOAR automation — alongside incident response, malware analysis and email security.

I graduated in Digital Forensic Engineering with a 3.64 GPA and have peer-reviewed research published on machine-learning-based threat detection. I build AI-assisted tooling that cuts the analysis and triage load on SOC teams, and stay active in the community as a CTF competitor and instructor.

Eren ONDER
// education

Education

2022-2026
University of Firat
Digital Forensic Engineering, Technology Faculty
GPA 3.64 / 4.00 · Network Security, Digital Forensics, Cryptography, Operating Systems
// capabilities

Skills

🛡️

Security Operations

Splunk (SPL)
IBM QRadar (AQL)
Cisco XSOAR (SOAR)
MITRE ATT&CK
EDR / XDR
Incident Response
Email Security (ESA)
🔍

Analysis & Forensics

Network Analysis (Wireshark)
Sysmon / Windows Event Log
Volatility
Autopsy
Nmap
Penetration Testing
Reverse Engineering
💻

Programming

Python
Bash / Linux
C#
C / C++
JavaScript
🔬

Soft Skills

Active Learning
Creative Thinking
Communication
Leadership
// work

Experience

03/2026 - Now
Associate Cyber Security Analyst
iGA Istanbul Airport · Istanbul, Turkey
Current

Associate Cyber Security Analyst

  • Monitor and correlate log sources in Splunk SIEM through custom SPL queries mapped to MITRE ATT&CK techniques, detecting and escalating security incidents across critical airport infrastructure

  • Scan the organisation-wide application inventory to identify vulnerable versions, correlating them against published security advisories and classifying them by exploitability and criticality before reporting them to the owning teams for patching

  • Analyse EDR telemetry in Cisco AMP during alert investigations, applying host isolation and IOC-based blocking

  • Analyse email headers, attachments and embedded URLs through Cisco ESA and Beamsec, pushing confirmed IOCs to organisation-wide blocking to detect and neutralise phishing and BEC attempts


SplunkCisco XSOARMITRE ATT&CKEDRIncident ResponseEmail Security
09/2025 - 01/2026
SOC L1 Analyst (Intern)
OnBT - Kalyon Holding · Istanbul, Turkey

SOC L1 Analyst - Intern

  • Triaged security alerts across the organisation in IBM QRadar and Trend Micro Vision One by applying documented L1 playbooks, escalating confirmed true positives to L2 within SLA

  • Analysed raw event logs and enriched IOCs against VirusTotal and open-source threat intelligence, classifying and escalating phishing, malware and intrusion attempts each month

  • Contributed to identifying and reporting security gaps within the organisation’s network infrastructure


IBM QRadarTrend Micro Vision OneAlert TriageIOC AnalysisThreat Intelligence
07/2025 - 08/2025
Intern
Turkish Technology · Istanbul, Turkey

Network Management - Intern

  • Analyzed and evaluated security architectures within Turkish Airlines’ corporate network infrastructure

  • Contributed to Proof of Concept (PoC) studies for the protection of critical systems

  • Detected, classified, and reported security incidents through SIEM solutions


SIEMSecurity ArchitectureIncident ResponsePoC
// community

Volunteer Work

12/2023 - 09/2025

Chairman

Cybersecurity Community · Fırat University, Turkey
500+ Members
12/2023 - 07/2025

Event and Organization Coordinator

Cyber Anatolia Communities · Turkey
35+ University Clubs
08/2023 - 12/2023

Event and Organization Coordinator

Google Developer Student Club · Firat University, Turkey
Tech Community
// credentials

Certifications

Splunk Core Training Series

Splunk (eLearning)
July 2025 - April 2026
  • Intro to Splunk
  • Using Fields
  • Working with Time
  • Scheduling Reports & Alerts
  • Intro to Knowledge Objects
  • Statistical Processing
  • Visualizations

Certified Social Engineering Defense Practitioner (CSEDP)

The SecOps Group
February 2026 Verify

Certified Network Security Practitioner (CNSP)

The SecOps Group
July 2025 Verify

Pre Security

TryHackMe
July 2025 Verify

CCNA: Introduction to Networks

Cisco Networking Academy
January 2024 Verify

CCNA: Introduction to Cybersecurity

Cisco Networking Academy
November 2023 Verify

NDG Linux Unhatched

Cisco NetAcad
November 2023
// timeline

Activity

April 5, 2025
CTF Organizer, ABMCTF
🎯 CTF Organizer

Served as an organizer for the ABMCTF competition. Designed 30+ cybersecurity challenges across five categories to educate and challenge participants.

December 31, 2024
Cybersecurity Seminar, Ahmet Kabaklı Science High School
🎤 Conference

Delivered a seminar on cybersecurity and digital forensics engineering to high school students, focusing on raising awareness about digital threats.

December 28, 2024
1st Place, HacktorX CTF
🏆 CTF

Led our team to victory in the HacktorX CTF competition by solving challenges in cryptography, network, web, OSINT, and reverse engineering.

December 20, 2024
Red Team Bootcamp & CTF Training, Fırat University
🎓 Training

Organized and instructed advanced-level CTF training, covering multiple categories and hosting a mini competition.

July 3, 2024
3rd Place, ABMCTF
🏆 CTF

Competed in the 3rd ABMCTF Capture The Flag contest, solving complex cybersecurity challenges with our team “Black Team.”

May 24, 2024
CTF Training Instructor, Code Night Event
🎓 Training

Provided hands-on CTF training on Cryptology, Web, Network, and OSINT during a night-long event for students and cybersecurity enthusiasts.

May 2–4, 2024
Published Paper, IIC2024 Conference
📄 Research

Presented and published a paper titled “Real-Time Human Recognition With Random Forest Algorithm Using Gait Biometrics Images” at the 3rd International Informatics Congress.

April 23, 2024
3rd Place, HAVELSAN Hackathon (HAVELSAN EKSPRES)
🏅 Hackathon

Developed an AI-based Intrusion Detection System “Cyber MAIN” during a 4-day hackathon train journey. Awarded 3rd place among 26 university teams.

March 27, 2024
Cybercrime Awareness Conference, Fırat University
🎤 Conference

Organized a seminar in collaboration with the Cyber Crimes Unit, focusing on social engineering, phishing, and safe internet use.

March 12, 2024
Cybersecurity Awareness Seminar, Yöntemim Schools
🎤 Conference

Held an engaging seminar on digital forensics and cybersecurity for high school students, including live demonstrations of cyber attack scenarios.

January 1, 2024
TÜBİTAK 2209-A Project Recipient
📄 Research

Received national support for a project titled “AI-based Gait Biometrics for Person Identification in Forensic Cases.” Reached the semi-final stage in the 2023/2 term.

June 25, 2023
2nd Place, ABMCTF
🏆 CTF

Secured 2nd place in the 2nd ABMCTF Capture The Flag competition by solving challenges across various cybersecurity domains.

// portfolio

Projects

⚠ In development Vardia - Cyber Threat Intelligence Platform

Vardia - Cyber Threat Intelligence Platform

A cyber threat intelligence platform that pulls CVEs, zero-days, ransomware leaks, darkweb postings and security news into a single feed, then …
Threat IntelligenceCVEDarkweb MonitoringNext.jsPostgreSQL
See Details
⚠ In development URL Guard - AI-Assisted Malicious URL Detection

URL Guard - AI-Assisted Malicious URL Detection

A self-training, locally hosted phishing and malicious URL detector that combines machine learning, rule-based analysis, threat intelligence and AI …
Machine LearningPhishingThreat IntelligencePythonFlask
See Details
Fake Extension Builder

Fake Extension Builder

This project is a lightweight utility developed to obfuscate .exe file extensions by inserting the Braille Pattern Blank character (Unicode U+2800) …
C#Unicode ObfuscationSecurity Research
See Project
⚠ Academic Use Only Ryuk Ransomware

Ryuk Ransomware

This project was developed to safely simulate and analyze how real-world ransomware operates within a controlled environment. Written in C#, this …
C#AES EncryptionMalware Simulation
See Project
Web 3.0 Cryptocurrency Transfer Site

Web 3.0 Cryptocurrency Transfer Site

I developed an application leveraging Web 3.0 technologies that enables users to securely and swiftly transfer cryptocurrency on the Ethereum network …
EthereumMetaMaskWeb3.jsSolidity
See Project
// contact

Get in Touch

Istanbul, Turkey 🇹🇷