Open to opportunities

Nahit Kanig

@nahitkanig

Cybersecurity analyst specializing in incident response, cloud security, and threat detection across multi-cloud environments.

United States

Message

What I'm looking for

I seek a hands-on security role focusing on incident response, detection engineering, and cloud security within a collaborative, proactive team that values automation and continuous improvement.

I am a cybersecurity and incident response professional with hands-on experience detecting, hunting, and remediating threats across AWS, Azure, and on-prem environments. I have authored SIEM detection rules, led cloud-native security deployments, and reduced incident response time through automation and targeted detection engineering.

I prioritize applying NIST frameworks, zero-trust IAM practices, and AI-assisted techniques to strengthen defenses and accelerate investigations. My background includes endpoint forensics, threat intelligence integration, and producing executive-ready incident reports to drive remediation and strategic security improvements.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security and Incident Response Analyst

Current

Favor Tech

Dec 2022 - Present (3 years 3 months)

Led detection, hunting, and incident response across cloud, endpoint, and network telemetry; authored SIEM detection rules and containment playbooks that reduced false positives and minimized business disruption. Implemented NIST-aligned controls and integrated AWS security services to improve visibility and response across multi-cloud environments.

Splunk QRadar Crowdstrike AWS Security Threat Hunting Incident Response NIST 800 53

SOC Analyst

ManTech

Nov 2021 - Dec 2022 (1 year 1 month)

Monitored and tuned SIEM and EDR detections (Splunk, QRadar, CrowdStrike) and conducted daily threat hunts to identify lateral movement and privilege escalation, while performing cloud security assessments and improving detection coverage against MITRE ATT&CK techniques.

Splunk QRadar Crowdstrike Microsoft Defender Threat Hunting SIEM Tuning

Cyber Analyst

Amazon Web Services

Apr 2020 - Nov 2021 (1 year 7 months)

Embedded security into CI/CD and IaC pipelines, led cloud incident response and vulnerability assessments, and deployed AWS-native security services to reduce response time by 40% and centralize threat detection across multi-account environments.

CloudTrail Cloudwatch Splunk Python Incident Response Vulnerability Assessment CI CD