Open to SOC opportunities

Sabir Mehdikhanli

SOC Analyst · Blue Team Specialist

I hunt through logs, build detections and use attacker knowledge to make defenses stronger.

scroll
01 — About

Defender by trade,
curious by nature.

I am a dedicated cybersecurity professional and Blue Team specialist focusing on Security Operations Center (SOC) analysis and threat detection. I have hands-on experience with SIEM solutions (Splunk, QRadar, Wazuh), log analysis, cloud security and automation with Python and Bash.

Using my foundational knowledge of Red Team tactics, I identify vulnerabilities early and strengthen incident response. I enjoy solving complex security problems, sharpening my defensive skills and building resilient infrastructure.

RoleSOC Analyst
FocusBlue Team · Threat Detection
LocationSumgait, Azerbaijan
UniversityAzerbaijan Technical University
MajorInformation Security
LanguagesAZ · EN (B2) · TR (B1)
0University GPA
0University entry score
0Security certificates
0SIEM platforms
02 — Skills

What I work with.

Defensive operations first, with enough offensive knowledge to think like the attacker.

Blue Team

SOC Operations

  • Log monitoring, correlation, alerting and investigation in Splunk, QRadar and Wazuh
  • Sysmon, WinCollect and Wazuh agents, FIM and Active Response
  • Threat detection and incident response on Windows and Linux logs
  • VirusTotal integrations and detection engineering
SplunkQRadarWazuhSysmon
Intelligence

Threat Intelligence

  • CTI, OSINT methods and MITRE ATT&CK mapping
  • Cyber Kill Chain, persistence, credential access and defense evasion
  • Malware classification and attack lifecycle analysis
MITRE ATT&CKOSINTCTI
Red Team

Penetration Testing

  • Recon with Nmap, Gobuster, Dirb, FFUF, Amass and Sublist3r
  • SQLi and XSS in TryHackMe and lab environments
  • Reverse shells, C2 concepts, privilege escalation, lateral movement
  • AD attacks: Kerberos, Silver and Diamond Tickets
NmapFFUFTryHackMe
Network

Networking & Traffic

  • TCP/IP, OSI, DNS, DHCP, NAT, SMB and routing
  • Packet and traffic analysis with Wireshark
  • Investigating suspicious traffic patterns
WiresharkTCP/IP
Windows

Windows Server & AD

  • Domain Controllers, Active Directory and GPO management
  • DNS, DHCP, File Server, WDS, WSUS, LDAP and NTFS permissions
  • Event Viewer and Advanced Audit Logging
ADGPOWSUS
Linux

Linux Administration

  • Users, permissions, logging and firewall management
  • Syslog, Journald, SELinux, Auditd and sudoers
  • Apache, Nginx and Linux hardening
AuditdSELinuxBashPython
03 — Certificates

Verified, not just claimed.

Every card opens the official verification page.

04 — Journey

Where I'm coming from.

Ongoing

Self Study

Labs · TryHackMe · Certifications

Continuous hands-on practice in home labs and online platforms: SIEM, digital forensics, malware analysis, network security and Red Team techniques.

Nov 2025 — Present

Blue Team Student

MilliSec Course

Hands-on SIEM labs, detection engineering and incident response.

Education

Information Security (taught in English)

Azerbaijan Technical University

GPA 88.9 · Entry score 564

Languages

AzerbaijaniNative
EnglishB2
TurkishB1

Soft skills

CommunicationTeamworkProblem SolvingTime ManagementComposureCreativity
05 — Hire me

Let's work together.

Looking for a SOC analyst or need help with a security task? Tell me about it and I'll get back to you.

SOC Analyst roleInternshipFreelance / ProjectCollaboration
Message sent

Thanks! Your inquiry reached Sabir. He will get back to you by email soon.

Almost there

Open the message in your email app, or copy it and send it to mehdikhanlisabir@gmail.com.

Open in email
LinkedIn ↗ GitHub ↗