Ugur Akyazi

Conducted comprehensive security event analysis, including log, host, and email analysis across ServiceNow, Splunk SIEM, Microsoft XDR, ProofPoint, PaloAlto, and Digital Guardian DLP, to identify and mitigate threats.

Performed in-depth cloud security analysis (Azure, GCP, AWS) and OSINT/Sandbox analysis to uncover sophisticated cyber threats.

Automated phishing ticket enrichment, processing over 20,000 similar tickets in 1.5 years, drastically improving response efficiency.

Contributed to a GenAI-based Cyber Phishbot tool, reducing phishing email analysis time by approximately 50% through automated suspicious indicator analysis.

Developed and optimized 9 new Splunk and MDE detection rules, and reviewed 25 existing rules, significantly enhancing threat detection capabilities.

Streamlined initial incident triage and escalation processes, conducting lessons learned analysis and coordinating critical communications with IT Core teams.

Leveraged GenAI prompts for efficient ticket reviews, log inspections, and comprehensive incident analysis.

Partnered with the Threat Intelligence Team to address sensitive data disclosures and execute domain takedowns, safeguarding organizational assets.

Led research on identifying IoT botnet malware families and analyzing malware-based payment attacks using machine learning on network behavior.

Performed empirical data analysis utilizing ML and causal models to extract cybercrime intelligence from underground markets and forums.

Co-lectured and supervised 'Economics of Cybersecurity' MSc course for 3 semesters, covering security metrics, investment, risk management, and data analytics.

Managed the full life cycle of NATO AirC2 (Air Command and Control) Software Projects, ensuring adherence to strategic objectives and operational requirements.

Served as National Expert for critical NATO Committee and Board meetings, providing strategic input for AirC2 Software Projects across various working groups.

Delivered robust network and security infrastructure, ensuring seamless operations for critical ICT projects.

Maintained firewall and router/switch security across extensive Intranet and Internet networks, ensuring continuous protection.

Successfully deployed and authorized NATO Secure Wide Area Network across 23 distinct sites, enhancing secure communication capabilities.

Administered and maintained a large-scale network of over 3,000 devices across 90+ branches and a data center, ensuring 24/7 network operations.

Directed IT risk management and cyber/business resilience strategies, ensuring robust defense against evolving threats.

Ensured strict compliance with ISO27001 policies, regulations, and audit requirements, enhancing organizational security posture.

Supervised a 40+ member data center administration team across four divisions: Cyber Defense & Operations, Network Systems & Security, IT Systems Administration, and Visual Data Systems & Help Desk Management.

Resolved complex network and security issues, minimizing downtime and enhancing system stability.

Monitored network performance to proactively identify and address potential bottlenecks, ensuring high availability.

Instructed the 'Information Security' Certification Program, equipping professionals with essential cybersecurity knowledge.

Delivered lectures for 7 undergraduate courses over multiple semesters, including Computer Science, Java Programming, System Analysis, and Internet Programming.

Supported academic research projects, contributing to data collection, analysis, and report generation.