Umut U.

• Analyses were performed in accordance with cyber incident response procedures using SIEM, SOAR, EDR, XDR, NDR, ASM and CTI tools and cyber incidents were intervened. • Cyber incident response processes were managed with a fast, calm and solution-oriented approach. • PoC, analysis, management, installation and integration processes of Attack Surface Management (ASM) and Cyber Threat Intelligence (CTI) products were successfully completed. • Worked on various projects in GCP and Azure environments. • Defense measures were implemented to increase cyber resilience. • Table-top and cyber drills were organized and reports were made to managers. • Newly emerging technologies were evaluated in terms of security impact. • Incident response protocols and processes were improved. • Cyber security awareness was increased and special defense strategies were developed. • Incident reports were prepared and security improvements were suggested. • New cyber security solutions were evaluated.

• Analysing incidents escalated from Tier-1 SOC analysts to support information security research and start IR process. • Identify business impact of incidents with customers. • Guidance and supervision on incident response and quarantine techniques. • Incident Response Plans checking availability of tickets. • Organizing clients' meetings with IT staff and explaining vulnerability mitigation techniques. • Installing and testing Open Source IDS/IPS such as Suricata/Snort. • Setting up honeypot trap systems such as Modern Honey Network (MHN) or creating customized traps with Snort rules. • Writing new SIEM correlation or refresh and check old ones. • Vulnerability assessment. • Following new vulnerabilities, especially zero days, updating SIEM correlations, informing the SOAR team. • Informing customers about new vulnerabilities and providing information about mitigation techniques. • Providing regular customer service reports to the customers by scheduled meetings.

• Continuously monitoring the security alerts queue. • Triaging security alerts. • Running the vulnerability tests from OpenVAS. • Monitoring health of customer security sensors and SIEM & SOAR infrastructure. • Collecting data and context necessary to initiate level 2 escalation. • Working closely with level 2 team towards the continuous improvement of the service. • Reporting the scheduled SOC reports to level 2 analysts.

•Planning and Coordination: Planned and coordinated grants to be applied with local NGOs. •Proposal Preparation: Prepared and designed project proposals for various grants. •Training: Served as an assistant trainer in Monitoring & Evaluation sessions. •Project Cycle Management: Assisted as a trainer in Project Cycle Management sessions. •IT Problem Solving: Addressed and resolved IT problems within the office.

Educational Volunteer (kids)

With a curriculum focused on cyber security, cloud and operating system courses.