Orhan Baysal Email & Phone Number

Highly motivated Cyber Security Analyst. CompTIA Security+ certified with a demonstrated history of working in the computer and network security industry. Skilled in Analytical Skills, SOAR, EDR, Email Security, and Security Information and Event Management (SIEM). Strong information technology professional with an Associate's degree focused in Computer and Information Systems Security/Information Assurance from Onondaga Community College.

• 

  Soc Analyst

  Cybernow Labs

  Sep 2021 - Present - Sterling, Virginia, United States

  ● Hands-on experience in using various tools such as Splunk Enterprise Security, IBM QRadar,SentinelOne, CrowdStrike Falcon, Proofpoint, Wireshark, Nmap, Tenable Nessus, Kali Linux,Windows, IBM Resilient, and Jira.● Managed day-to-day activities of the SOC team regarding Security Monitoring, Investigation andIncident Response, and Vulnerability Management.● Conducted log analysis on Splunk Enterprise Security and IBM QRadar SIEM solutions and providedrecommendations to the technical teams via the Resilient (IBM Security SOAR), and Jira, ticketingsystems.● Monitored and analyzed SIEM alerts through Splunk and IBM QRadar and identify security anomaliesfor investigation and remediation.● Real-time log monitoring in the Security Operation Center from different devices such as firewalls, IDS, IPS, operating systems like Windows, Linux, Windows Servers, System Applications, Databases, Web Servers, and Networking Devices.● Performed endpoint investigations and performed triage analysis through SentinelOne and CrowdStrike Falcon to identify the incident's timeline and affected hosts.● Monitored emails from Proofpoint for phishing mailbox and reacting to/analyzing requests submittedincluding the engagement of the end-user for any additional inputs or inquiries.● Excellent knowledge of TCP/IP, OSI model, security concepts, WAN and LAN concepts, and Firewallsecurity policies.● Excellent working knowledge of IBM Resilient and Jira ticketing tools and took follow-ups and closing of the tickets based on the events or incidents.● Managed analysis to determine the legitimacy of files, domains, and emails using online OSINT tools such as VirusTotal, Urlscan.io, MX Toolbox, and Ipvoid.● Identified potential threats, phishing attacks, anomalies, and infections.● Analyzed PCAP files, narrowed down anomaly traffics with Wireshark and TCP dump, examined the infected hosts' details, and wrote IOC on executive summary reports.