YUSIF HUSEYNOV
Cyber Security Specialist
Baku
Overview
4
4
years of professional experience
5
5
years of post-secondary education
6
6
Certifications
3
3
Languages
Work History
Cyber Security Trainer
Sky Tech Group
05.2024 - 10.2024
- Developed and delivered cybersecurity training programs focusing on social engineering, secure IT practices, and Active Directory attacks/defenses.
- Led hands-on 1 workshops simulating vulnerable AD environments, allowing trainees to practice real-world cybersecurity scenarios.
Cyber Risk Management Intern
PASHA Bank OJSC
08.2023 - 11.2023
- Assisted in risk assessments and vulnerability analysis as part of the bank's cyber risk governance.
- Gained foundational knowledge of risk mitigation and incident handling procedures.
Tax Consultant
Bukhalternative Advisory Company
08.2020 - 07.2022
- Provided consultancy to ~250 clients in service, retail, and wholesale sectors.
- Corrected $350,000 worth of asset records and handled correspondence with tax authorities.
Education
Cybersecurity Bootcamps -
Azerbaijan Cybersecurity Center
Baku 01.2023 - 07.2023
Defscope Training Center -
Defscope Training Center
Baku 08.2022 - 11.2022
BSc in Business Administration -
Eastern Mediterranean University
Cyprus 01.2017 - 01.2021
Skills
- SIEM Analysis: Splunk, Elastic Stack, Logstash, Kibana
- Event Log Analysis: Windows Event Logs, Sysmon, ETW, PowerShell (Get-WinEvent)
- Threat Hunting: MITRE ATT&CK-based hunting, IOC/TTP analysis, behavioral analytics
- IDS/IPS: Snort, Suricata, Zeek rule development and tuning
- Malware Analysis: Static and dynamic analysis, debugging, rule creation (YARA, Sigma)
- Network Traffic Analysis: Wireshark, Tcpdump, PCAP inspection, RDP decryption DNS/ICMP tunneling
- Detection Engineering: Custom Splunk apps, correlation rule writing, signature-based detection
- Forensics: Memory/Disk forensics, evidence acquisition, triage tools
- Incident Handling: Incident documentation, triage, and reporting procedures
- Active Directory Pentesting: Enumeration, privilege escalation, persistence techniques, and ticket attacks
- Web Vulnerability Exploitation: Burp Suite, injection flaws, XSS/code injection analysis
- Internal Recon: BloodHound, PowerView, LDAP enumeration
- Scripting & Automation: Python, Bash, Powershell
- Scanning & Enumeration: Nmap (advanced), Nessus, OSINT tools
Certification
CompTIA Security+
Timeline
Cyber Security Trainer
Sky Tech Group
05.2024 - 10.2024
Cyber Risk Management Intern
PASHA Bank OJSC
08.2023 - 11.2023
Cybersecurity Bootcamps -
Azerbaijan Cybersecurity Center
01.2023 - 07.2023
Defscope Training Center -
Defscope Training Center
08.2022 - 11.2022
Tax Consultant
Bukhalternative Advisory Company
08.2020 - 07.2022
BSc in Business Administration -
Eastern Mediterranean University
01.2017 - 01.2021