Bayram Shirinov Email & Phone Number

Baku, Az

Баку, Бакинская Экономическая Зона, Азербайджан

Baku, Contiguous Azerbaijan, Azerbaijan

• Lead the planning, deployment, and configuration of the SIEM solution, ensuring optimal performance and scalability.• Maintain and manage the SIEM platform, including routine updates, patches, and upgrades.• Create and maintain correlation rules to detect anomalies and potential threats.• Detect, investigate, and respond to security incidents in a timely and efficient manner, following incident response protocols.• Coordinate with incident response teams to mitigate and remediate security breaches.• Integrate threat intelligence feeds into the SIEM platform to enhance threat detection and situational awareness.• Collaborate with the vulnerability management team to integrate vulnerability data into the SIEM for risk assessment.• Configure the SIEM for compliance monitoring and reporting, ensuring adherence to relevant industry standards and regulations.• Generate and present reports to management and auditors as needed.• Develop custom scripts and automation solutions to enhance SIEM functionality and efficiency.• Create custom parsers and connectors to support data integration.• Provide training and mentorship to junior team members and other IT staff on SIEM best practices.• Share knowledge and insights on cybersecurity trends and threats.

Baku, Contiguous Azerbaijan, Azerbaijan

• Perform in-depth analysis of security incidents escalated from Tier 1, identifying false positives, true positives, and their potential impact.• Prioritize and triage incidents based on severity and potential risk to the organization.• Conduct detailed investigations of security incidents to determine the root cause, attack vectors, and potential impact on systems and networks.• Collaborate with cross-functional teams to develop and implement effective incident response and mitigation strategies.• Optimize SIEM rules, filters, and correlation logic to improve detection accuracy and reduce false positives.• Continuously monitor and fine-tune SIEM configurations to enhance its efficiency and effectiveness.• Proactively hunt for potential threats and vulnerabilities within the organization's environment using the SIEM platform.• Analyze trends and patterns to identify potential emerging threats and recommend proactive measures to mitigate risks.• Document incident details, investigation findings, and remediation actions taken for future reference and knowledge sharing.• Share knowledge and insights with Tier 1 analysts and other stakeholders to improve overall incident handling and detection capabilities.

Baku, Contiguous Azerbaijan, Azerbaijan

• Investigate and respond to alerts and incidents generated by SIEM, Check Point Endpoint Security, Cisco ESA, and other security tools.• Configure, manage, and monitor Check Point Endpoint Security to ensure endpoint protection against advanced threats and vulnerabilities.• Conduct regular audits and updates to ensure the effectiveness of endpoint security measures.• Administer and monitor Cisco ESA to ensure effective email security and protection against phishing, malware, and other email-borne threats.• Collaborate with teams to fine-tune email security policies and configurations.• Utilize Nessus and similar tools to conduct vulnerability assessments on systems and networks.• Coordinate with system owners to remediate identified vulnerabilities in a timely and efficient manner.• Monitor and analyze firewall logs to identify and respond to potential security incidents.• Collaborate with application development teams to ensure effective WAF rule sets and security measures.

Master Of Business Administration - Mba, Cybersecurity

Msc Cyber Security, Information Technology

Bachelor Of Business Administration - Bba