Experience
Associate Cyber Security Analyst
Monitor and correlate log sources in Splunk SIEM through custom SPL queries mapped to MITRE ATT&CK techniques, detecting and escalating security incidents across critical airport infrastructure
Scan the organisation-wide application inventory to identify vulnerable versions, correlating them against published security advisories and classifying them by exploitability and criticality before reporting them to the owning teams for patching
Analyse EDR telemetry in Cisco AMP during alert investigations, applying host isolation and IOC-based blocking
Analyse email headers, attachments and embedded URLs through Cisco ESA and Beamsec, pushing confirmed IOCs to organisation-wide blocking to detect and neutralise phishing and BEC attempts
SOC L1 Analyst - Intern
Triaged security alerts across the organisation in IBM QRadar and Trend Micro Vision One by applying documented L1 playbooks, escalating confirmed true positives to L2 within SLA
Analysed raw event logs and enriched IOCs against VirusTotal and open-source threat intelligence, classifying and escalating phishing, malware and intrusion attempts each month
Contributed to identifying and reporting security gaps within the organisation’s network infrastructure
Network Management - Intern
Analyzed and evaluated security architectures within Turkish Airlines’ corporate network infrastructure
Contributed to Proof of Concept (PoC) studies for the protection of critical systems
Detected, classified, and reported security incidents through SIEM solutions