Cybersecurity Engineer
Boğaziçi University
Turning security signals into action.
Building systems that hold up.
01 — About
My work spans SOC operations, SIEM engineering, incident triage, and cloud-native infrastructure. I turn raw telemetry into actionable detections and build automation that makes security operations more reliable and easier to investigate.
02 — Experience
03 — Approach
Effective security operations start with trustworthy log collection, useful detection logic, and a clear path from an alert to an investigation. My experience covers that workflow across QRadar, endpoint tooling, and response automation.
Onboard and normalize log sources so analysts can trust the evidence behind each alert.
Write and tune QRadar rules and reports with AQL and Regex, aligned to MITRE ATT&CK.
Investigate phishing, DDoS, and malware activity with endpoint and response tooling.
04 — Projects
Investigation of phishing, DDoS, and malware incidents using endpoint and response tooling.
Multi-tenant log onboarding, ATT&CK-aligned detection logic, and SOC reporting.
Multi-zone cluster provisioning with secrets management and change-management safeguards.
Relational design and SQL-injection testing across student database projects.
05 — Skills
IBM QRadar · SIEM Engineering · AQL · MITRE ATT&CK · Defender EDR/XDR · Cortex XSOAR
Kubernetes · Terraform · Ansible · Kubespray · GitLab CI · HashiCorp Vault · Linux · Docker
Phishing Triage · Malware Investigation · DDoS Analysis · Defender EDR/XDR · Cortex XSOAR
SQL · Java · Kotlin · Spring Boot · Redis · Apache Airflow · Relational Databases
06 — Contact