Jeyran Aghazada

DevOps Engineer

Baku City, Baku Ekonomic Zone, Azerbaijan9 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Red Teaming and Purple Teaming methodologies.
Strong background in malware analysis and development.
Proven experience in vulnerability assessment and incident response.

Stackforce AI infers this person is a Cybersecurity Specialist with a focus on Red Teaming and Malware Development.

Contact

Skills

Core Skills

Red TeamingSecurity ResearchPurple TeamingMalware AnalysisIncident ResponseVulnerability AssessmentFront-end DevelopmentGraphic Design

Other Skills

bug bountyReverse EngineeringRed TeamPurple Team planningBlue TeamNetwork SecurityCyber Threat Intelligence (CTI)Malware static analysisPenetration TestingThreat DetectionIncident HandlingNGFWVulnerability ManagementFlutterICS Security

About

Throughout my previous roles as a web specialist, app manager, graphic designer, and front-end developer, I have acquired diverse skills and experiences in creating seamless digital experiences. The journey into cybersecurity began with the EJPT certification, followed by the advanced ECPPTv2 and ECIR certifications from INE and OSEP certification from OffSec. This dynamic background has equipped me with a unique perspective in incident response, pentesting of web applications, and infrastructure security. Now, as I pivot towards becoming a malware developer, I am committed to utilizing all my accumulated knowledge and skills to contribute effectively to this specialized field. My passion lies in not only understanding cybersecurity intricacies but also in applying this understanding to craft innovative solutions. Excited about the challenges ahead, I am dedicated to pushing the boundaries of my capabilities and making meaningful contributions to the ever-evolving landscape of cybersecurity and malware development.

Experience

Synack red team

Red Team Researcher

Mar 2025 – Present · 1 yr · United States · Remote

As a member of the Synack Red Team (SRT), I perform advanced offensive security testing and adversary emulation to identify, validate, and responsibly disclose vulnerabilities across diverse enterprise environments. My role combines independent security research with structured engagements to enhance resilience against real-world threats.
Key Responsibilities:
Conduct adversary emulation exercises aligned with MITRE ATT&CK to assess enterprise defenses.
Perform deep-dive vulnerability research across web, mobile, cloud, and infrastructure assets.
Identify and exploit critical vulnerabilities in client environments, ensuring accurate proof-of-concepts.
Collaborate with Synack’s internal team to validate and triage submissions, providing detailed technical reporting.
Leverage custom-built tools, scripts, and advanced evasion techniques to simulate realistic threat actor behaviors.
Participate in coordinated bug bounty assessments, focusing on high-severity and zero-day class vulnerabilities.

Security Researchbug bountyReverse EngineeringRed TeamRed Teaming

Socar cic

2 roles

Cyber Security Researcher/Analyst Purple Team

Promoted

Jul 2024 – Present · 1 yr 8 mos · Socar

Perform in-depth investigation and analysis of escalated security incidents, identifying root cause, attack vector, and scope of impact
Develop and maintain detection rules (BIOCs) and logic based on internal telemetry, threat intelligence, and adversary TTPs
Create, manage, and update incident response playbooks to improve workflow consistency and investigation quality
Mentor and support Tier 1 analysts by guiding triage processes and providing technical feedback on escalations
Conduct manual threat intelligence research using OSINT and CTI sources; manage and generate incidents in the internal threat intelligence platform
Simulate attack techniques to validate detection logic and improve alert coverage across endpoint and network telemetry
Build and manage dashboards in XDR and SIEM platforms to support threat hunting, detection engineering, and visibility into active threats
Enrich detection systems with relevant IOCs from CTI reports and real-time research to improve alert fidelity and threat coverage
Collaborate with internal teams on detection tuning, hunting strategies, and proactive defense initiatives
Provide project-based security assessments by integrating into CI/CD pipelines throughout the software development lifecycle, Maintain ongoing communication with developers during project timelines to ensure secure coding and architecture practices, Coordinate with system administrators to apply system-level hardening measures based on assessment findings, Conduct final penetration tests at the end of each project to validate the security posture and ensure remediation of identified risks