Ayesha Kavak

About Ayesha Kavak

Dedicated and detail-oriented Cybersecurity Analyst with hands-on experience in Security Operations Center (SOC) monitoring, incident response, and threat intelligence. Proficient in utilizing SIEM, EDR, and vulnerability scanning tools to detect, investigate, and mitigate security threats. Strong foundation in malware analysis, phishing detection, and OSINT research, complemented by expertise in network security, intrusion detection, and endpoint protection. Strong analytical and problem-solving skills with a decisive approach to complex security incidents. Highly adaptable and quick to learn, with excellent critical thinking and attention to detail. An effective communicator and team player, collaborating to enhance security measures and protect sensitive data. Passionate about proactive monitoring, continuous learning, and process improvement. Holds CompTIA CySA+, Security+, and Splunk Core Certified Power User certifications.

Experience

1. Security Operations Center Analyst

   National Cyber Group

   Aug 2021 — Present

   Analyze security events using SIEM platforms (IBM QRadar, Splunk Enterprise Security) to detect, investigate, and respond to potential security incidents- Leverage EDR solutions such as CrowdStrike Falcon and SentinelOne, ensuring rapid containment and remediation of threats- Manage, report and analyze vulnerabilities through comprehensive scanning and analysis using tools like Tenable Nessus, Nmap, and Netsparker, enhancing the organization’s security posture- Execute phishing analysis, utilizing Proofpoint for automated threat detection and conducting manual investigations to identify and mitigate email-based attacks- Utilize JIRA, Resilient (SOAR), and Hive for efficient incident tracking, documentation, and cross-functional collaboration within the SOC environment- Conduct network traffic analysis using Wireshark and manage virtualized environments with VirtualBox, VMware, and Oracle BOX, ensuring secure network configurations and operations- Ensure secure network communications and threat protection by managing critical network protocols (TCP/IP, SSL, IDS/IPS, DNS) and deploying Next-Generation Firewalls and VPN solutions- Maintain strict compliance with GRC frameworks (NIST SP 800-Rev5, SANS) by implementing relevant policies and controls- Leverage OSINT tools (VirusTotal, Hybrid Analysis, Joe Sandbox, IBM X-Force, AbuseIP, CyberChef) for threat intelligence gathering, enabling accurate incident correlation and proactive threat hunting- Apply the MITRE ATT & CK framework to strengthen threat detection and response.

Education

• Anadolu University

  Business Administration

• Northern Virginia Community College

  Associate of Arts and Sciences - AAS, Cybersecurity

• Uludag University

  Computer Technology and Programming