Asım Yıldız

• Malware reverse engineering and analysis • Threat hunting and incident response • AI-driven security automation and detection pipelines • Building and optimizing Security Operations Centers (SOC) • Cross-functional leadership and security governance • Continuous improvement via cutting-edge tech and threat intelligence

I have been working as a System Security Engineer. One of my main job responsibility is to make company systems as secure as possible. To make this happen I have been researching technologies that my company uses. So continous learning most important part of my job. Security of Container and Orchestration platforms are my other responsibility. My K8s knowledge is medium level. I also using products like Prisma Cloud Compute to implement company security policies to container environment.

I had been working as an Information Security Engineer. My main responsibility was detecting configuration absences that could be reason of vulnerabilities. I also defined dozens of security detection correlations using with qradar SIEM. Vulnerability scan/analysis/management was my other responsibility. *QRadar Administration *SIEM Rule definitions *Helping CISO for decision making about security related topics *Vulnerability management Projects: *SIEM Consolidation Project *Phishing platform installation (Saving provaided) *Compliance check and configuration improvement of Windows&Linux systems (with Nessus compliance scan) *Manage Engine Desktop Central Project *Blocking sources which are attacked to company IP Addresses automatically using with QRadar SIEM. (Similar works have been made with Python scripts) *3rd Party Penetration tests are managed as a technical project manager

Eksim Investment Holding employees 7000 people. 500 People are working in IT depertmant. (Software development, Network, Security, System etc.) One of my job description was planning and designing network&security systems of companies Holding owns. I had been also giving advices to IT manager to consolidating security of systems. *Designing&Planning Security *Designing&Planning Network *SIEM Correlation Definition *Firewall,SIEM,WAF,DDOS Management *Consolidation of Security Projects *Arbor APS and TMS Consolidation Project *Splunk SIEM Implementaiton Project *Firewall Migration Fortinet to Checkpoint / Checkpoint to Fortinet Project *Citrix WAF Deployment / Implementation Project *Layer 2/Layer 3 Devices Hardening Project *Consolidation Network Security Project *Disaster Recovery Center Activation Project

I had been working as Trainer and Consultant. One of my main job description was implementation of systems like firewall, IPS, Domain Controller to company laboratory environment for renting to training companies. (Network and Security exam labs) I had also deploy vendor products (virtual/physical) to our lab environment for POC. I had been mostly using ESX-i environment for virtual appliance deployment. My other job description was educating people who buy Network&Security training below. *CCNA R&S, CCNP R&S, CCNA Security, Cisco ASA Trainer *Network&Security Management *Network&Security Lab Installation *PoC Implementation

My second professional work experince. I had focus on learning background of technologies and protocols. I belive that If you know theory well enough you can manage and torubleshoot easily. *MSSP Firewall Management *Firewall Migration (Checkpoint to Fortigate) *Router&Switch Configuration (Cisco, HP) *Troubleshooting&Consolidating Network&Security (BGP, Layer 2 hardening, Multilayer switches etc.) *DataCenter Network&Firewall Management (Nexus Switch, Fortigate&Checkpoint&Palo Alto Firewall)