Position: Cyber Security Consultant, Information Security Consultant, Cyber Security Manager, IT Security Manager, Information Security Manager, Security Risk Manager, IT RISK
Category: Security
English level: upper
Years of experience: 11

Accomplishments:

Implementation of Security Operations Center (SOC): Designed and implemented a SOC for agricultural systems, enhancing the organization's ability to monitor, detect, and respond to cybersecurity threats.

ISO27001 Compliance Achievement: Ensured full compliance with the ISO27001 standard for agricultural networks, demonstrating a commitment to best practices in information security management.

Risk Management and Threat Mitigation: Conducted comprehensive risk assessments, vulnerability analyses, and threat modeling, leading to the identification and mitigation of potential security risks.

Deployment of Advanced Security Tools: Successfully deployed SIEM tools, IDS/IPS, and firewalls, strengthening the infrastructure protection against potential cyber-attacks.

Penetration Testing and Security Reviews: Performed penetration testing, red teaming, and secure code reviews, identifying weaknesses and implementing necessary security enhancements.

Incident Response Coordination: Established robust incident response plans and coordinated CSIRT activities, ensuring effective and timely containment and remediation of security incidents.

Cybersecurity Awareness Training: Provided cybersecurity awareness training to staff, promoting best practices and fostering a culture of security awareness within the organization.

Strategic Cybersecurity Planning: Developed and executed cybersecurity strategies that were aligned with organizational goals, contributing to the overall security posture and business objectives.

Leadership and Team Development: Led a team of cybersecurity professionals, providing guidance, mentorship, and performance evaluations, fostering a collaborative and skill-enhancing environment.

Compliance and Regulatory Liaison: Liaised with regulatory bodies and stakeholders, ensuring full compliance with industry regulations and data protection laws, thereby maintaining the organization's reputation and legal standing.

Continuous Threat Monitoring: Continuously monitored and analyzed emerging cyber threats, adjusting security measures and strategies as needed, keeping the organization's security posture strong and adaptive.
Work Experience:

I have over 15 years of experience managing Cyber Security and Information Security projects and operations across various organizations.

Projects and Tasks Completed:

-Designed, implemented, and maintained SOC for agricultural systems.
-Ensured ISO27001 compliance for agricultural networks.
-Conducted risk assessments, vulnerability analysis, and threat modeling.
-Deployed SIEM tools, IDS/IPS, and firewalls for infrastructure protection.
-Performed penetration testing, red teaming, and secure code reviews.
-Established incident response plans and coordinated CSIRT activities.
-Developed and executed cybersecurity strategies aligned with organizational goals.
-Oversaw the implementation of PAM, NAC, NESSUS, Qualys, WAF, and Next-Generation Firewalls within organizations.

Technologies Used:

-ISO27001, NIST, COBITv5
-SIEM tools, IDS/IPS, Firewalls
-PAM, NAC, NESSUS, Qualys, WAF, Next-Generation Firewalls

Current Role in the Team:
I am currently the Head of IT Security Unit at "MKT İstehsalat Kommersiya" MMC and a Cybersecurity Instructor at the Technical University of Azerbaijan. I lead a team of cybersecurity professionals, providing guidance, mentorship, and performance evaluations. I also coordinate cross-functional collaboration to establish and maintain Information Security policies, procedures, and standards.