irfan alkan

Cybersecurity professional with 4+ years of progressive Security Operations Center experience, advancing from SOC Analyst Intern to SOC Analyst L1, SOC Analyst L2, and SOC Team Lead / Cybersecurity Instructor at CYDEO.

I have investigated approximately 300 security alerts and incidents involving web attacks, malware, phishing, suspicious PowerShell activity, authentication attacks, ransomware, network scanning, privilege escalation, and endpoint threats.

My hands-on experience includes IBM QRadar, Splunk, and CrowdStrike Falcon, including offense and alert investigation, AQL and SPL searches, correlation-rule tuning, dashboards, process-tree analysis, IOC investigation, detection tuning, containment, and remediation support.

I have also built a virtual SOC home lab covering Active Directory, Sysmon, pfSense, Splunk, Kali Linux, attack simulation, telemetry collection, detection creation, and incident investigation. In addition, I have trained and mentored approximately 200 cybersecurity students and analysts across 20 cohorts.

I am particularly interested in fully remote SOC, Security Operations, Incident Response, Detection, and MDR opportunities open to candidates based in Türkiye.