Author Image

Hi, I am Abulfaz

Abulfaz Ismayilov

Threat Detection Engineer at Cyberpoint.

I am a cybersecurity specialist with three years of experience in threat analysis, incident response, development, and monitoring. I have successfully conducted security audits, managed security breaches, and developed robust security protocols to protect organizational assets. My expertise includes vulnerability assessment, risk management, and compliance with industry standards. I hold certifications such as eWPT, CRTO, IBM SOC Analyst, Tryhackme, and etc.

Certified Red Team Operator
eLearnSecurity Web Application Penetration Tester
IBM Cybersecurity Analyst Professional Certificate
Leadership
Team Work
Hard Working

Skills

Splunk
Splunk

Proficient in leveraging Splunk for comprehensive data analysis, real-time monitoring, and incident response, ensuring optimal security posture and operational efficiency. Experienced in creating advanced dashboards, queries, and alerts to provide actionable insights and support decision-making processes.

ELK Stack
ELK Stack

Skilled in utilizing the ELK Stack (Elasticsearch, Logstash, and Kibana) for robust data collection, analysis, and visualization to enhance system monitoring and security. Experienced in configuring and managing ELK components to create dynamic dashboards, perform complex searches, and generate insightful reports for informed decision-making.

Qradar
Qradar

Proficient in using QRadar for advanced threat detection, security incident analysis, and compliance monitoring. Experienced in configuring and tuning QRadar to create customized dashboards, correlation rules, and alerts, providing comprehensive visibility and actionable insights into security events.

Crypttech - CSIEM
Crypttech - CSIEM

Experienced in deploying and managing Crypttech CSIEM for real-time security monitoring, threat detection, and incident response. Skilled in configuring CSIEM to develop custom dashboards, correlation rules, and alerts, enabling comprehensive analysis and proactive management of security events.

CrowdStrike XDR
CrowdStrike XDR

Proficient in utilizing CrowdStrike XDR for extended detection and response, providing comprehensive threat visibility and accelerated incident response. Experienced in configuring and managing CrowdStrike XDR to integrate multiple data sources, create detailed security analytics, and automate response actions to enhance overall cybersecurity posture.

Cortex XDR
Cortex XDR

Skilled in leveraging Cortex XDR for advanced threat detection, investigation, and response across endpoints, networks, and cloud environments. Proficient in configuring Cortex XDR to correlate and analyze security data from diverse sources, enabling proactive threat hunting and rapid incident response to enhance overall cybersecurity resilience.

XSOAR
XSOAR

Experienced in utilizing XSOAR (formerly Demisto) for orchestrating and automating security operations, incident response, and threat intelligence processes. Proficient in configuring XSOAR playbooks and integrations to streamline workflows, enhance collaboration between security teams, and improve overall incident response efficiency.

JavaScript
JavaScript

Proficient in JavaScript for developing dynamic and interactive web applications, leveraging frameworks such as React.js and Node.js. Experienced in writing clean, efficient code to create responsive user interfaces, implement client-side functionalities, and manage server-side operations, ensuring optimal performance and scalability.

Linux
Linux

Skilled in Linux system administration, including installation, configuration, and troubleshooting across various distributions such as Ubuntu, CentOS, and Red Hat. Proficient in shell scripting, package management, user management, and security hardening, ensuring stable and secure operation of Linux-based environments.

Experiences

1
Cyberpoint LLC.

Jul 2022 - Present

Baku, Nizami district, Heydar Aliyev Avenue 189 B

SOC L2 (Threat Detection Engineer)

Apr 2024 - Present

Responsibilities:
  • Written detection rules in SIEM and XDR for optimization and performance in SOC environment
  • Written Incident Response playbooks and scenarios
  • Conduct in-depth analysis of security events and incidents using advanced threat detection techniques and tools
  • Work closely with other security teams, including SOC L1 analysts, vulnerability management, and threat intelligence teams, to enhance threat detection and response capabilities.
  • Perform proactive threat hunting to identify hidden threats and vulnerabilities within the environment, leveraging threat intelligence and behavioral analysis.
SOC Monitoring Specialist

Sep 2023 - Apr 2024

Responsibilities:
  • Assist in the deployment of new security tools and technologies, providing technical expertise and support during the implementation process
  • Oversee and maintain security monitoring tools and systems, ensuring they are up-to-date, properly configured, and effectively integrated with other security infrastructure
  • Utilize advanced analytical techniques and tools to identify the root cause of incidents, assess their impact, and recommend remediation steps.
Junior SOC Monitoring Specialist

Jul 2022 - Sep 2023

Responsibilities:
  • Continuously monitor security information and event management (SIEM) systems and other security tools to identify and respond to potential security incidents in real-time
  • Analyze security alerts, email analysis, suspicious activity and determine the severity and potential impact of the incident
  • Escalate incidents to SOC L2 analysts or relevant teams for further investigation and resolution when necessary
Prosol CJSC.

Apr 2022 - Jul 2022

Baku, 90A Nizami St, Baku, Azerbaijan

Intern

Junior Penetration Tester

Jun 2022 - Jul 2022

Responsibilities:
  • Document and report findings in a clear and structured manner, providing detailed information on vulnerabilities discovered and potential impacts
  • Perform vulnerability assessments using automated scanning tools and manual techniques to identify and evaluate security vulnerabilities in systems and applications (such as Burpsuite, OWASP Zap, Nmap, and etc.)
  • Learned work flow of penetration testing with the help of Portswigger and INE platform
SOC Analyst

Apr 2022 - Jun 2022

Responsibilities:
  • Created SOC environment using Wazuh, The Hive, Cortex, Shuffle, ELK Stack, and etc
  • Learned work flow of blue team with the help of letsdefend and INE platform
2
3
State Agency for Public Service and Social Innovations under the President of Azerbaijan.

Jan 2018 - May 2018

Baku, Bakikhanov district, Sulh street, 197

Intern

ASAN Volunteers

Jan 2018 - May 2018

Responsibilities:
  • Help citizen for some problems and participate in many ASAN volunteer activities

Education

Azerbaijan Technical University
2021-2023
Master Degree in Cybersecurity
CGPA: 98 out of 100
International Training and Project Center
2021-2022
Cybersecurity Courses & Labs
Baku Engineering University
2014-2018
Bachelor Degree in Public Administration
GPA: 76 out of 100