Security Management Specialist at İşNet
Security Operations · Threat Intelligence · Security Automation · Digital Forensics
I'm a cybersecurity professional and Digital Forensics Engineering graduate from Fırat University (2024). My work and interests sit at the intersection of security operations, proactive threat detection, incident investigation, and practical security tooling.
I enjoy turning security research into reproducible investigations, useful automation, and resources the community can learn from.
- Security operations & threat hunting: SIEM-driven investigation, log analysis, alert triage, and detection workflows.
- Threat intelligence: Tracking emerging threats, investigating indicators of compromise (IOCs), and connecting intelligence to defensive operations.
- Security engineering & automation: Building Python-based tools that make analysis and vulnerability tracking more repeatable.
- Vulnerability research: Investigating web application weaknesses and documenting findings through technical proof-of-concepts.
- Digital forensics & incident response: Evidence analysis, investigation techniques, and practical DFIR workflows.
| Project | Overview |
|---|---|
| CVE Research & PoCs | Technical write-ups and proof-of-concepts covering issues such as authentication bypass, XSS, and SQL injection. |
| PhishTrapX | Python-based email analysis for phishing investigations, including message authentication checks and suspicious indicator extraction. |
| Nessus Vulnerability Tracker | Converts Nessus exports into structured reports and compares scans to track newly detected and remediated vulnerabilities. |
| Security Operations Center | Turkish-language SOC learning materials, analyst resources, and practical study guides. |
| DFIR Resources | Notes and resources related to digital forensics and incident response. |
I publish articles to share investigations, explain security concepts, and make practical techniques more accessible.
Industry publications
- Ornis Recon: Siber Güvenlikte Proaktif Yaklaşım — İşNet, 2026
- Hackerlar Sizi Araştırıyor, Peki Siz Onları Araştırıyor Musunuz? — İşNet, 2026
Technical articles on Medium
- LOLBAS — Living-off-the-land techniques and detection
- Email Analiz — Email investigation and authentication mechanisms
- Server-Side Request Forgery (SSRF) — Web application security
- OAuth Zafiyeti — Authentication and authorization security
- Speaker: SOC ve Tehdit Avcılığı — Türkiye Siber Güvenlik Topluluğu, February 2026.
- Trainer: SIEM ile Tehdit Avcılığı ve SOC Analistliği — Siber Kulüpler Birliği, January 2026.