I work at the intersection of cybersecurity engineering, monitoring, observability, and technical pre-sales.
My day-to-day work includes designing proof-of-concept environments, translating complex product capabilities into clear technical value, preparing demos and workshops, and helping organisations evaluate monitoring and security technologies against real operational requirements.
Outside customer-facing work, I build open-source tools and lab environments around security validation, SOC workflows, network visibility, WAAP/WAF, local-first applications, and AI-assisted analysis. I also publish technical and strategic cybersecurity articles for professional, editorial, and academic audiences.
I like building systems that explain what happened, why it matters, and what to do next.
name: Yusuf Dalbudak
location: Istanbul, Türkiye
role: Cybersecurity & Monitoring Pre-Sales Specialist
background: Management Information Systems
professional_identity:
- technical pre-sales specialist
- cybersecurity researcher and practitioner
- technical writer and editor
working_style:
- validation-first
- local-first where practical
- research-driven
- focused on reproducible labs and measurable outcomes
current_focus:
- monitoring and observability
- security validation and attack simulation
- SOC and log-analysis workflows
- WAAP, WAF, and application security
- EASM, CTEM, and threat intelligence
- AI-assisted security tooling| Area | Practical focus |
|---|---|
| Monitoring & observability | Infrastructure visibility, telemetry design, alert quality, reporting, and PRTG lab work |
| Technical pre-sales | Product demonstrations, PoCs, solution mapping, enablement, and technical discovery |
| Security validation | Controlled attack simulation, evidence correlation, exposure validation, and defensive testing |
| Application security | WAAP/WAF concepts, reverse-proxy controls, vulnerability research, and web-security labs |
| SOC engineering | Log triage, detection logic, incident context, and analyst-oriented automation |
| Research & communication | Technical articles, academic analysis, webinars, GitHub projects, and practical learning content |
I write about cybersecurity, monitoring, operational resilience, vulnerability research, cyber conflict, threat intelligence, application security, and the practical use of security technologies.
| Platform | Focus | Profile |
|---|---|---|
| SiberHavadis | Cybersecurity news, vulnerability analysis, threat developments, and technical editorial content | Read articles |
| ÇözümPark | Turkish technical articles, practical guides, and enterprise IT/security topics | Browse articles |
| Academia.edu | Academic and research-oriented publications in cybersecurity and technology | View research |
| LinkedIn Articles | Professional analysis, technical insights, and industry-facing commentary | Read articles |
| Project | Description | Stack |
|---|---|---|
| Threadboard | Local-first visual investigation workspace for mapping people, events, evidence, questions, and relationships on an infinite canvas. | React, TypeScript, Vite, React Flow, Zustand, Zod |
| UASF Platform | Vendor-agnostic, validation-first security validation and evidence-correlation platform for approved assets. | React, Fastify, TypeScript, PostgreSQL, Redis, Docker |
| SOC Log Triage CLI | Passive command-line analysis of Linux authentication and Nginx logs with structured defensive findings. | Python, CLI, YAML, JSON, pytest |
| Advanced WAF Lab | Modular Go reverse-proxy WAF with request normalisation, rule matching, anomaly scoring, and structured logging. | Go, YAML, Reverse Proxy, JSON Logging |
| MonitorQA TR | Local-first monitoring QA and productivity platform for query design, sentiment review, crisis scoring, and reporting. | Python, Streamlit, SQLite, DOCX/XLSX export |
I am currently deepening my work in:
- monitoring architecture and observability workflows
- local-first analyst tooling
- security validation platforms and evidence correlation
- log pipelines, SIEM efficiency, and SOC enablement
- WAAP/WAF evaluation and application-security labs
- attack-surface management, CTEM, and threat intelligence
- technical writing, webinars, and open-source security education
I share technical projects, research, lab notes, cybersecurity analysis, and practical walkthroughs through: