Levent Durdalı

Experience

• 

  Trendyol

  Information Security Engineer
  Information Security Team - Security Risk Management
My CV in PDF
• 

  NATO

  Cyber Security Trainee
  Joint Intelligence and Security Division
  • Supported activities for creating a Security Capability Maturity Model for various domains of Security.
  • Contributed to NATO's position on emerging technologies, such as Artificial Intelligence.
  • Assisted in guiding teams to ensure their systems are in compliance with NATO Security policies.
  • Supported knowledge management processes for the Security, Policy and Oversight Branch of the NATO Office of Security.
  • Mar 2023 - Aug 2023 (6 Months)
• 

  Turkcell Communications

  Information Security Specialist

  Specialist
  Cyber Security Directorate - Security Management and Architecture Team
  • Created a databank of Social Engineering (Phishing, Smishing, Vishing) topics greatly reducing the time to conduct these company-wide. Also, with the use of some specialized Sites/Projects, the Phish Databank is being updated to match emerging problems.
  • - Public Phish Example - Turkcell SSO - BITB
  • - Planned and led the first SMS based phishing simulation.
  • Created Information Security Awareness plans, training and communication roadmap. Also carried out studies that will increase overall security competence of the employees
  • - Public Security Awareness Examples - Turkish - Security Awareness GitBook
  • Helped determine Cyber and Information Security strategy in compliance with overall company strategies.
  • Helped manage Information Security process and provided coordination on Governance, Risk and Compliance for Cyber Security.
  • Working remotely with the Istanbul team.
  • Sep 2021 - Jan 2023 · (1 years, 5 months)
• 

  Yapı Kredi Bank

  Junior Security Engineer - Part Time
  Security Operation Center (SOC)
  • Wrote, Maintained and optimized multiple IBM Security SOAR (Resilient) App, Rule and Playbooks also while writing entirely new apps. These were used by our L2-L3 analysts, greatly reducing their work.
  • Created a Resilient and MISP automation project greatly reducing the time to triage and analyzing.
  • Created a Metric Project with Qradar and Resilient, which was used to demonstrated the work done to upper management.
  • Splunk and IBM Qradar Integration for Creating dashboards, which were used by our SOC.
  • Stack: MSIP, QRadar, IBM Resilient, Triage Configuration, Splunk, Python, STIX
  • May 2021 - Jul 2021 · (3 months)
• 

  STM Defence

  Cyber Security Intern
  Cyber Security Directorate / Cyber Fusion Center
  • Web Application Development with Django Framework (Threat Intelligence Application).
  • Created a Honeypot Configuration and Management demo for the directorate.
  • Attack Surface Analysis & Reports.
  • Open Source Intelligence (OSINT) with variety of tools.
  • Malware Analysis (PoetRAT).
  • Created custom OSINT/Web Analysis scripts with Python, reducing the time to write Attack Surface Analysis & Reports.
  • Stack: Django Development, Threat Intelligence Platform Development, Honeypot, VBA Macro, Attack Surface Analysis, OSINT (Tor Node, Spiderfoot, Maltego, Recon-ng), Python, Recorded Future
  • Feb 2020 - Jun 2020 · (5 months)
• 

  Turksat Satellite Inc.

  IT Security Intern
  Enterprise Information and Cyber Security Directorate
  • Wrote and Implemented Switch and Router Hardening Document.
  • Network Security and Monitoring.
  • Created Excel VBA and Python automation tools for internal tools reducing weekly manual work.
  • Analyzed and documented different web tracker behaviors that effected certain servers.
  • Researched and documented various different IT Security related topics.
  • Stack: Cisco CLI, Cisco Routers and Switch, VBS Macro, Python, Log4j, Tomcati, Regex
  • Jun 2019 - Aug 2019 · (3 months)