Ahmet Kağan Aksoydan

Leading team of security engineers to create and fine-tune detection rules, detect, respond, and review incidents, apply threat hunting/intelligence and malware analysis, create playbooks, runbooks for L1 analysts. Additionally, create shift plans and report findings regularly.

Create, configure and fine tune correlation rules for Qradar SIEM according to bank requirements Created, configured, and fine-tuned correlation rules. Performed incident analysis. Vulnerability analysis on network and web apps. EDR setup and analyzed EDR alarms. Risk analysis of information systems according to CIS standarts Vulnerability analysis on Bank's network and web apps using Security Center and Netsparker Analysis of DLP alarms EDR setup and analysis EDR alarms

- Create, configure and fine tune correlation rules for SIEM according to customer environment and requirements. - Review, analyze, escalate and respond to security events triggered through the SIEM according to internal security procedures of the customer. - Create, manage and run reports, queries for customers by using SIEM. - Document procedures for other analysts. - Provide a technical support for L1 and investigate escalated incidents. - Perform incident analysis.

Applied vulnerability analysis on customer’s intranet and internet network,reported findings.

Administrated the UTM firewalls (such as, PaloAlto and Labris).