AHMET
DEMIR

I have worked on detecting, investigating, and responding to a wide range of cybersecurity incidents in enterprise environments. My experience includes analyzing indicators of compromise (IOCs), investigating phishing campaigns, and supporting the full lifecycle of incident response activities. I have performed phishing analysis including email header inspection, URL and attachment detonation, and identification of malicious infrastructure used in targeted and mass phishing attempts. In parallel, I have investigated system and network-based indicators to determine scope, impact, and attack progression. My work has also involved triaging SOC alerts, analyzing security logs and telemetry, and supporting forensic investigations across endpoints and network traffic. Through these activities, I have developed a practical understanding of common attack techniques, adversary behavior, and incident escalation paths. Overall, my experience is built on hands-on exposure to real security incidents, including phishing investigations, IOC tracking, and enterprise incident response operations, with a focus on accurate analysis and structured investigation.

WHAT I DO

CURRENT FOCUS