UT Dallas
B.S. in Computer Science. President of the Cybersecurity Community.
Cybersecurity Analyst · Cloud Security
Flagship system · MDFC Triage Sentinel
Attack path.
Action approved.
A high-severity cloud finding enters the system. The evidence is still fragmented.
Sample investigation
Resourceprod-api-vm-07
ExposureInternet facing
Active CVEs3 critical
DecisionPending analysis
Context
Network
Threat
Verdict
Unclassified Human approval required before action01 / 05
- Detect
- Classify
- Inspect
- Correlate
- Approve
Photography: Sergei Starostin and Brett Sayles / Pexels
02
About
The analyst behind the system.
McKesson · Cloud Security
Ahmet Furkan Koç
Cybersecurity Analyst
I secure cloud environments, investigate risk, and build automation that helps security teams move from findings to decisions.
My background spans cloud posture management, product security, endpoint defense, and AI-assisted security workflows.
Security became the place where everything connected.
I started in computer science without knowing whether I would land in application security, cloud, a SOC, or governance.
The answer became cloud security because it sits at the intersection of infrastructure, identity, automation, and detection.
Toshiba
Progressed from Product Security Engineer Intern to Cloud Security Analyst.
McKesson
Cybersecurity Analyst focused on cloud security and enterprise risk reduction.
03
Evidence, not adjectives
Measured impact across cloud and endpoint security.
0+
Cloud misconfigurations remediated through Defender for Cloud.
0%
Improvement in cloud security posture within six months.
0+
Enterprise endpoints monitored and secured.
0%
Reduction in mean time to respond through an AI security agent.
Cybersecurity Analyst
- Monitor cloud security posture across enterprise environments, identifying misconfigurations and control gaps.
- Investigate cloud security findings and prioritize remediation using exposure, asset context, and business risk.
- Partner with infrastructure and application teams to strengthen cloud controls and document remediation guidance.
Cloud Security Analyst
- Improved cloud posture by remediating more than 100 misconfigurations and aligning environments with CIS benchmarks.
- Monitored endpoint security across more than 11,000 assets using Microsoft Defender and CrowdStrike.
- Triaged Sentinel and Defender alerts, investigated anomalies, and escalated high-priority incidents.
Product Security Engineer Intern
- Automated critical-CVE and Azure Resource Graph workflows with PowerShell, KQL, and AI technologies.
- Applied SAST, DAST, and SCA to enterprise SaaS products against OWASP Top 10 guidance.
- Earned Toshiba's Fall 2025 Intern of the Cohort recognition.
Cybersecurity Intern
- Used OSINT tooling to investigate vulnerabilities and emerging threats.
- Developed practical experience with EDR, network protocols, and threat detection.
04
Selected work
Systems built to make security work clearer and faster.
Agentic AI Threat Assessment System
A LangGraph supervisor routes cloud findings through context, network, and threat-analysis agents before a human approval gate allows action.
- FastAPI · PostgreSQL · OpenAI
- Azure Defender · Jira integration
AI Security Agent for Cloud Monitoring
An Azure AI Foundry agent that identifies exposed resources and sends actionable reports to resource owners.
- Azure AI Foundry · RAG
- Python · CSPM
CyberTrack
An AI-assisted goal tracker for cybersecurity students and graduates, with personalized onboarding, streaks, and mentor chat.
- Next.js · TypeScript · Claude API
- Deployed on Vercel
Daily practice
Cloud, detection, application security, and automation.
- Cloud
- Azure Defender for Cloud, Sentinel, Entra ID, CSPM, IAM
- Detection
- CrowdStrike, Splunk, KQL, SIEM/SOAR, MITRE ATT&CK
- AppSec
- OWASP ZAP, Burp Suite, SAST, DAST, SCA
- Build
- PowerShell, Python, Bash, LangGraph, Terraform
- Standards
- NIST, CIS, ISO 27001, PCI DSS
“Ahmet brings a rare combination of intellectual curiosity, humility, reliability, and quiet leadership.”
05 · Contact
Cloud security, cybersecurity, and the ideas shaping both.
Thanks for spending some time with my work.
If you want to talk security, compare notes, or simply say hello, my inbox is open.
Email me