Information Security Technology student | Cloud & Identity Security · Automation
I build and document small, reproducible security investigations and tools. My focus is cloud identity, defensive security operations, and automation, informed by how attackers exploit misconfigurations and access paths.
- Cloud identity investigation — Microsoft Entra ID / Splunk sign-in review with a tested offline timeline validator; original event-level validation remains pending.
- Security capstone — fictional security assessment with reproducible authentication-log analysis and a documented remediation-verification plan.
- Identity detection & automation — Python analysis of synthetic cloud sign-ins, tested failure-then-success correlation, and structured JSON findings; part of the Google Cybersecurity portfolio.
- TryHackMe investigations — 12 documented hands-on labs across SOC triage, network analysis, incident response, identity, and access control.
- Education: Information Security Technology, Sakarya University of Applied Sciences (SUBÜ).
- Credential: Google Cybersecurity Professional Certificate.
- Developing next: Microsoft Entra ID / IAM, cloud security engineering, detection automation, AI security / safe LLM workflows, and controlled attacker-informed testing. AI security is a learning goal, not a claim of completed deployment.
Evidence & reproducibility guide — selected projects, what is verified, and what is still pending.
Additional work: Academic evidence · Learning log · Security mistake library
Portfolio standard: completed lab work, synthetic scenarios, and planned exercises are labeled separately. Conclusions are limited to the supporting evidence.
