Gokalp Denli

Experience

• 

  SONORAN SCHOOLS

  Jul 2010 - Jun 2015

  Campus IT Coordinator

  Developed and implemented needs assessments, evaluations, and long-term plans relatedto technology initiatives, equipment, and software.Facilitated and monitor a comprehensive, school-wide Technology Plan.Provided technical support and training for systems and networks.Helped plan, control, and direct the overall activities of the school.Utilized Endpoint Manager to manage, monitor, and secure school devices.Liaised with IT coordinator to conduct basic troubleshooting in network, and endpointdevices via TeamViewer. Show less

• 

  International School of Laos

  Aug 2015 - Nov 2020

  Educational Technologies Coordinator

  ● Procurement of educational hardware and software, arranged the necessary trainings for staff, students and parents. ● School Information System super user and coordinator, provisioned and de-provisioned users, arranged trainings, reported bugs to the company, help troubleshoot with users.● Coordinated the adaptation process of Office 365 products● Organized the online-learning program of the schools at the beginning of the pandemic.● Created forms, surveys and polls to gather data to guide school improvement efforts and use of technologies..● Helped upgrading the existing IT infrastructure. ● Coordinated opening of a new school campus● Conducted other educational, administrative and leadership duties Show less

• 

  Solvent CyberSecurity

  Mar 2021 - Feb 2022

  Trainee SOC analyst

  Follow detailed operational processes and procedures to appropriately analyze, escalate, and assist in remediation of security incidents.Perform analysis of log files of Firewall, IPS, IDS, Server and Proxy via Splunk SIEM solution.Analyze pcap files for Malware analysis and find details of the infected hosts and write IOC on executive summary reports.Provide analysis and containment of compromised systems and mitigate root causes.Identify, track, and investigate high-priority threat campaigns, malicious actors with the interest, capability and TTPs (Techniques, Tactics and Procedures).Perform post-mortem analysis on logs, traffic flows, and phishing activities to identify malicious actors. Show less

• 

  Babylon

  Feb 2022 - Dec 2023

  Threat Detection Analyst

  Follow detailed operational processes and procedures to appropriately analyze, escalate, or remediate security incidents depending on the playbook.Respond to alerts from MSSP, EDR and NDR; Remediate or escalate where appropriate. Perform analysis of logs for WAF, IDS, AWS Cloudtrail, Google Workspace and Proxy etc. via Splunk SIEM solution.Conduct core information security activities: Security information & Events Management (SIEM), Malware Detection, Vulnerability Management, Education & Awareness, Open Source Intelligence (OSINT), Network Monitoring and Log AnalysisRun periodic vulnerability reports on production servers, employee devices and report appropriate departments for remediation in coordination with the senior vulnerability management analyst.Report alert tuning requests to the detection engineer or security service providers depending on the source of the alert.Prepare audit reports of security tools on employee laptops, then coordinate with end user services to remediate issues.Help to improve security posture by creating, and testing new detections in SIEM.Participating in SIRT meetings when necessary to help with analysis and response. Show less

• 

  CrowdStrike

  Jan 2024 - now

  Analyst, Falcon Complete