
Suleyman A.
Competenze

Consulta i miei servizi


Portfolio
Esperienza lavorativa
Security Engineer
Global Management
Sep 2025 - Present • 11 mos
🔹Direct security operations for a media holding with 800+ employees and 700+ endpoints spanning four Active Directory domains, an on-premises data centre, and cloud infrastructure. 🔹 Own the enterprise SIEM platform end to end — designing detection logic across endpoint, server, enterprise firewall, and email telemetry, and managing agent policy and data lifecycle architecture. 🔹Co-manage CrowdStrike Falcon EDR with an external MSSP; lead threat hunting and incident response, including full analysis of a multi-stage fileless malware intrusion from initial access to containment. 🔹 Lead the ISO/IEC 27001:2022 certification programme as ISMS Manager — defining scope, authoring the information security policy suite, and establishing risk methodology, governance roles, and the organisational asset inventory. 🔹Lead digital forensics and incident response (DFIR) investigations across multiple disciplines — phishing campaigns, fileless malware intrusions, and ransomware incidents — coordinating with internal stakeholders and executive leadership. 🔹Perform host-based and memory forensic analysis across Windows and Linux systems to reconstruct attacker activity and establish root cause. 🔹Identify indicators of compromise through static and dynamic analysis of both commodity and targeted malware. 🔹Established a centralised Threat Intelligence capability integrating multiple external feeds, with automated indicator matching against live telemetry and dark-web exposure monitoring. 🔹Implemented software supply-chain vulnerability monitoring (SCA/SBOM) and led a white-box security audit of a production platform, identifying and driving remediation of critical vulnerabilities.
Cybersecurity Instructor / Tutor
Kiber Təhlükəsizlik Platforması Azərbaycan • Part time
Dec 2023 - May 2026 • 2 yrs 5 mos
Design and deliver hands-on training programmes covering Infrastructure, WEB, and Mobile application penetration testing, Red Team operations, and Social Engineering, while mentoring students toward international security certifications.
Cyber Security Specialist
Azerbaijan Deposits Of Insurance Fund • Full time
Sep 2023 - Aug 2024 • 11 mos
🔹Conducted penetration tests across web and mobile applications, Active Directory environments, and network perimeter infrastructure for a national financial-sector institution. 🔹Administered the organisation's application security testing programme, managing static and dynamic analysis (SAST/DAST) capabilities and supporting remediation of identified findings.