Türkiye
• Helping automate offenses on SOAR by creating playbooks. • Monitoring, analyzing and creating report important security alarms generated against cyber threats. • Analysis of phishing, spoofing and malware-containing malicious findings. Operation of the Incident Response Procedure related to the events that took place. • If suspicious events are detected, to carry out the relevant security procedures, to operate and record a response transaction procedure with the relevant teams. To ensure that action is taken by notifying the customer. • To ensure that actions are taken regarding threat intelligence data from various sources. Checking the IOC rule on indicators from various sources. • Ensuring that the case is examined, analyzed and reported when any harmful incident occurs. • Examining and analyzing the case detected to be harmful with the Cyber Defense Team when necessary and brainstorming. • Sharing the monitoring, analysis and notifications against cyber threats into monthly reports with customers. • Following the bulletins containing security breaches reported by USOM (National Cyber Incident Response Team) and SOME (Cyber Incident Response Team) and notifying the actions to be taken. • In case of detecting harmful cases of websites, providing analyze theme on virtual sandbox systems such as anyrun, Browserling etc. and create reporting.
• Examination of alarms on EDR and implementation of recommended actions. • Examining the offenses occurred on Incident Detection and Response application and notifying the relevant teams. • Detecting and preventing attacks on WAF platform. • Responsible from analyzing and troubleshooting Network, Windows Servers and Load Balancers. • Cloud management, operations and monitoring. • Responsible from planning, designing, implementing and managing, web sites projects which are hosted on distributed Microsoft Windows Environment. • Configuring, managing and monitoring of Network Load Balancer devices which are located in front of the application servers. • Administrating, configuring and monitoring application servers and services. • Designing, implementing and keeping available application servers. • Performance Monitoring, Troubleshooting and capacity planning of web infrastructure. • Microsoft System Center Configuration and System Center Operations Management.
• Establishing, managing and implementing the Information Security policies of the countries affiliated to the headquarters. • Technical support to 10 countries affiliated to headquarters in Layer 3. • Managing the DLP platform, creating and implementing Information Security policies • Creating policies on antivirus and EDR applications, examining the alarms that occur and taking the necessary actions. • Execution of IAM and PAM projects, manage up their infrastructure and troubleshoot in case of problems. • Managing the AppLocker platform. Allowing or blocking the use of applications using AppLocker via GPO. • Carrying out POC processes of security applications. Determining the access and restrictions of the security applications to be used or desired to be used within the corporation. • Managing the Database Security application, determining its policies, examining the alarms that occur and taking the necessary actions. • Providing continuity of the system, distribution of application and operating system updates via SCCM. • Analysis and reporting of devices/applications in virtual and physical environments. • Preparing, preparing and distributing Corporate Operating System images. • Managing the Data Classification platform, implementing its policies, producing solutions in case of problems.
• Managing existing user devices in the construction, the creation of user profiles, implementation of required user department based policies. • Server installation, maintenance, installation and management of the operating system. • To improve the business continuity, such as analyzing, designing, editing and supporting, in order to maintain the network and hardware infrastructure required in the company in the most efficient way and ensuring security. • Data storage systems are designed to manage the structure of devices like printer / scanner and to intervene in cases of malfunction. • Monitor the situation according to the risk level and intervene if necessary to prevent situations that may affect the business continuity of the system.