Cybersecurity and log automation
Make sure your logs keep arriving, triage alerts automatically and harden your servers.
What I build
I work on log pipeline monitoring and reporting with Splunk, automatic alert triage and incident response with Cortex XSOAR playbooks, and Linux server hardening. I gained this experience during my cybersecurity internship at Hepsiburada, working with CrowdStrike EDR alerts and the Windows logging stack.
- Log monitoring
- Splunk searches, dashboards and reports that catch systems which stop sending logs.
- Incident response automation
- XSOAR playbooks that turn EDR alerts into incidents, run the first triage and open tickets for the right team.
- Server hardening
- Firewall, SSH, service permissions, security headers and log collection on Linux servers.
How I work
- DiscoveryWhat is done by hand today, how long it takes, what needs to connect; we pin it down together.
- PrototypeA small, working first version with real data, so feedback comes early.
- DeploymentSetup on a dedicated server with HTTPS, logging and error alerts.
- SupportDocumentation and handover; ongoing maintenance if you need it.
My experience
At Hepsiburada I built monitoring that detects systems which stop sending logs and wires them into Splunk; triage flows that turn CrowdStrike EDR alerts into XSOAR incidents automatically; and automations that check WinRM, WEF and firewall state during Windows log outages and open tickets with Slack alerts.
A multiplayer web app with security modules: ModSecurity WAF, HashiCorp Vault, OAuth2 and 2FA.FAQ
Are you open to full-time roles?
Yes. Working as an analyst in a SOC team is my main goal; I am open to junior SOC / L1 analyst roles.
Which tools have you used?
Splunk (Power User certification), Cortex XSOAR, CrowdStrike EDR, Windows Event Forwarding and Sysmon. I completed the TryHackMe SOC Level 1 path.
How is it priced?
Each project gets its own quote. Once we have talked through the scope, the integrations and any maintenance needs, I give you a clear price.