Deniz Cengiz

About Deniz Cengiz

Cybersecurity professional with 6+ years of experience in SOC operations, Application Security, Information Security, Vulnerability Management and Risk Mitigation. Strong background in software development, software automation, team leadership and mentoring.KEY SKILLSCYBERSECURITY • Incident response • Threat hunting • SIEM • Intrusion detection systems • Vulnerability management • Malware analysis • SOC • Log analysis • Network security • Cyber threat intelligence • Security monitoring.SOFTWARE TEST AUTOMATION • Test planning and execution • Automation testing • Risk assessment.SOFTWARE DEVELOPMENT • Mobile and Web application development • Object Oriented & Functional Programming.LEADERSHIP • Interim team manager, team lead, mentorship, stakeholder communication.TECHNICAL TOOLSCYBERSECURITY SOFTWARES • IBMQRadar • Splunk • Microsoft Sentinel • Elastic • CrowdStrike • Microsoft XDR • LimaCharlie • Wireshark • Suricata • Tines • Snyk AI • Tenable iO • CyberArk • DataTheorem.CYBERSECURITY WEB TOOLS • VirusTotal • Shodan • CyberChef • Anyrun • Joe Sandbox • Whois • UrlscanPROGRAMMING LANGUAGES • Java • Python • Swift • Kotlin • SQL • KQL • EQL • RestAPI • Bash • Powershell OS AND SDKs • Windows • Linux • Mac OS • iOS • Android • Intellij • Eclipse • Xcode • Android Studio.APP ANALYTICS TOOLS • Dynatrace • NewRelic.OTHER • Jira • Insomnia • Postman • Perfecto • Qtest • Pivotal • Microsoft Azure.

Experience

1. Q Engineering Lead - Soc Operations, Application Security, Vulnerability Mgmt

   Infosys

   Jun 2019 — Present · Chicago, IL, US

   Investigated and correlated security events within Security Information and Event Management (SIEM) platforms like Splunk and Microsoft Sentinel, performing incident response, handling 80–120 alerts weekly and reducing false positives through rule tuning and log optimization.• Performed proactive threat hunting across enterprise endpoints via Microsoft Defender for Endpoint (MDE) and CrowdStrike, and network logs, identifying suspicious activity and improving detection coverage across critical systems.• Conducted malware analysis to extract indicators of compromise (IOCs), resulting in the creation of new SIEM detection rules in Splunk to enhance enterprise threat visibility.• Supported SOAR implementation by developing and tuning automated playbooks in Splunk SOAR, streamlining response for alerts and enhancing consistency across investigations.• Applied cyber threat intelligence during threat hunting activities, enhancing proactive detection capabilities and strengthening security posture.• Executed log analysis on Palo Alto firewall, Microsoft Defender endpoint, identifying suspicious behavior and strengthening security monitoring capabilities by leveraging EDR.• Analyzed network security events using SIEM, Proofpoint IDS, investigating 40–60 suspicious network activities weekly and supporting timely incident response.​• Monitored and investigated cloud security threats using AWS GuardDuty to detect anomalous behavior, unauthorized access, and compromised IAM credentials.• Integrated Snyk AI vulnerability management tool into development SDK, strengthening risk mitigation, and ensuring compliance with secure software practices. • Deployed CyberArk PAM, strengthening privileged access controls of the mobile app and supporting NIST 800-53 / ISO 27001 compliance.• Strengthened security by automating over 90% of regression and analyzing Data Theorem vulnerability findings, performing risk assessments using OWASP Top 10, CVE/CVSS, and NIST frameworks.

Education

• Pamukkale Üniversitesi (PAÜ)

  Bachelor of Economics