Security Analyst Cyber

SAMMY KILIC

Cyber Security Analyst

Houston, TX 346-***-****

************@*****.*** . http://www.linkedin.com/in/sammy-kilich . Can work for any employer in the USA Detail-oriented, quick learner, and team player Cyber Security Analyst with great interpersonal, communication, and motivational skills, specializing in incident response, endpoint security, malware, and phishing analysis. Currently targeting SANS certification to further enhance expertise.

TECHNICAL SKILLS and TOOLS

SIEM & EDR & Ticketing System: Jira, Splunk ES, CrowdStrike Network: Wireshark, Pcap Analysis, Netskope, Nmap, Nessus, Bro Zeek, Suricata, Cyber Kill Chain Framework, TCP/IP, NIST Framework, Mimecast.

Vulnerability Analysis: Tenable Nessus, Qualys (Certified Specialist) Frameworks & Compliance Policies: Cyber Kill Chain, MITRE ATT&CK, NIST 800.53, SANS, HIPAA, PCI DSS, GDPR, Splunk, Splunk SOAR, DELL Taegis XDR, Cisco EDR, Suricata, Snort, Virtual Box, Linux, NIST/SAN. OSINT & Paid: VirusTotal, URLScan, CyberChef, Shodan, Centralops, AnyRun, MXToolbox, Joe Sandbox. CERTIFICATIONS

• CompTIA Security +

• IBM Cybersecurity Analyst Professional Certificate

• (ICS)2 Certified in Cybersecurity

• Splunk Search Expert Specialization by Coursera

• Vulnerability Management Specialist by Qualys

• DDOS Attacks & Defenses by University of Colorado

• Cisco Threat Hunting Workshop

• Introduction to Microsoft Azure Cloud Services by Coursera

• Wireshark Project Certificate by Coursera

• MITRE ATT&CK Defender by Cybrary

PROFESSIONAL EXPERIENCE

Associate Security Analyst HubSpot Boston, MA May 2023 - Feb 2025

• Create and track incidents and requests with an integrated Jira ticketing system.

• Follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of security incidents.

• Liaise with the Company’s Security Operation Center to respond to emerging incidents in a timely manner.

• Perform analysis of log files of Firewall, IPS, IDS, Server, and Proxy via Splunk SIEM solution.

• Analyze PCAP files for malware analysis, identify details of infected hosts, and write IOCs in executive summary reports.

• Identify, track, and investigate high-priority threat campaigns and malicious actors with interest, capability, and TTPs

(Techniques, Tactics, and Procedures).

• Analyze and review escalated cases until closure.

• Conduct core information security activities: Security Information and Event Management (SIEM), Malware Detection, Vulnerability Management, Education & Awareness, Open-Source Intelligence (OSINT), Network Monitoring and Log Analysis.

• Monitor and analyze Security Information and Event Management (SIEM) alerts through Splunk and identify security incidents for remediation and investigation.

• Utilize Netskope to monitor threats, enforce data loss prevention (DLP) policies, and enhance network security through real- time threat analysis.

• Use CrowdStrike to detect and mitigate threats, analyze endpoint activity, and enhance incident response with real-time threat intelligence. Document all activities during an incident and provide management with status updates during the life cycle of the incident.

• Utilize Mimecast to create policies, block domains and senders, safeguard email communications, detect and block phishing attacks, ensure data security, and enhance threat protection through advanced email filtering and archiving solutions.

• Use Joe Sandbox to analyze and detect malware, monitor suspicious files and URLs in a controlled environment, extract indicators of compromise (IOCs), and generate detailed reports for enhanced cybersecurity defense.

• Use Splunk SOAR to automate incident response, streamline security operations, integrate threat intelligence, and improve response time through playbooks and automated workflows.

• Provide information regarding intrusion events, security incidents, and other threat indications and warning information to the client.

Cyber Security Analyst Solvent Cybersecurity Fairfax, VA Sept 2021 - Feb 2023

• Create and track incidents and requests with an integrated ServiceNow (SNOW) ticketing system.

• Follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in the remediation of security incidents.

• Liaise with the Company’s Security Operation Center to respond to emerging incidents in a timely manner.

• Perform analysis of log files of Firewall, IPS, IDS, Server, and Proxy via Splunk SIEM solution.

• Analyze PCAP files for malware analysis, identify details of infected hosts, and write IOCs in executive summary reports.

• Identify, track, and investigate high-priority threat campaigns and malicious actors with the interest, capability, and TTPs

(Techniques, Tactics, and Procedures).

• Analyze and review escalated cases until closure.

• Conduct core information security activities: Security Information and Event Management (SIEM), Malware Detection, Vulnerability Management, Education & Awareness, Open-Source Intelligence (OSINT), Network Monitoring and Log Analysis.

• Monitor and analyze Security Information and Event Management (SIEM) alerts through Splunk and identify security incidents for remediation and investigation.

• Document all activities during an incident and provide management with status updates during the life cycle of the incident.

• Provide information regarding intrusion events, security incidents, and other threat indications and warning information to the client.

English Language Instructor Stirling Education Company Erbil, Iraq Sept 2010 - June 2021

• Teach advanced lessons in reading, writing, and critical thinking.

• Assess student progress through essays, exams, and presentations, providing constructive feedback.

• Facilitate discussions to develop analytical and communication skills.

• Maintain communication with students and parents on progress.

• Stay updated on best practices through professional development. English Language Instructor Cagh Education Company Baku, Azerbaijan Sept 2004 - June 2010

• Plan and teach lessons on reading, writing, grammar, and literature to meet curriculum standards.

• Assess student performance through assignments, quizzes, and projects, providing feedback for improvement.

• Create a positive classroom environment, fostering student engagement and collaboration.

• Adapt teaching methods to support diverse learning styles and individual student needs.

• Communicate with parents about student progress and address concerns.

• Participate in school meetings and professional development to enhance teaching skills. EDUCATION

• North American University, TX, USA Master’s degree, Curriculum and Instruction in English, 2021

• Bogazici University, Turkey Bachelor's Degree, Language and Literature, 2003

Contact this candidate