Open to opportunities

Aghaverdi Kalantarli

@aghaverdikalantarli

Cybersecurity engineer with 8+ years building SIEM/SOAR, detection engineering, and security automation for secure enterprise operations.

Azerbaijan

Message

What I'm looking for

I’m looking to design and operate secure enterprise environments—building SIEM/SOAR and detection engineering, automating incident response with Python, and continuously improving security posture through modern engineering practices and clear security documentation.

I’m a Cyber Security Engineer with 8+ years of experience in enterprise infrastructure, security engineering, and cybersecurity operations. I build and optimize SIEM, SOAR, and detection engineering capabilities, combining security monitoring with Python-based security automation.

In my current role as Head of department, I lead detection engineering, security architecture implementation, infrastructure hardening, and incident response while managing day-to-day enterprise IT and cybersecurity operations. I’ve deployed SIEM and SOAR solutions, applied ISO/IEC 27001 and NIST CSF principles, and mentored infrastructure and security staff.

Previously, I engineered centralized SIEM monitoring with Wazuh/ELK/Splunk, administered Linux (RHEL/Ubuntu), tuned IDS/IPS detections, and managed Fortinet and Palo Alto firewalls. I also created SOAR playbooks for automated incident response, and I contribute to projects like SentraSOAR and AI-assisted SOC automation.

Experience

Work history, roles, and key accomplishments

Current

Head of department

Current

Academy of Ministry of Emergency Situations

Jul 2019 - Present (7 years)

Designed, implemented, and optimized enterprise cybersecurity solutions including SIEM, SOAR, Linux infrastructure, firewall security, and Python-based security automation. Led detection engineering, security architecture implementation, infrastructure hardening, and incident response while managing day-to-day IT and cybersecurity operations.

SIEM SOAR Detection Engineering Security Architecture Infrastructure Hardening Incident Response Threat Hunting Linux Administration Active Directory Security NIST Cybersecurity Framework security implementation Security Monitoring

Engineer Programmer

Academy of Ministry of Emergency Situations

Oct 2016 - Jul 2019 (2 years 9 months)

Designed and implemented centralized SIEM monitoring using Wazuh, ELK Stack, and Splunk, developing and tuning detection and correlation rules for enterprise threat visibility. Administered Linux servers, managed IDS/IPS and firewalls, built SOAR playbooks for incident response automation, and supported security monitoring, incident response, and threat hunting.