Skip to content

[ CyberMACS Scholar & Security Researcher ]

I build and defend systems that don't fail quietly.

Cybersecurity researcher and incoming Erasmus Mundus Scholar with hands-on experience in network administration, system deployment, and threat discovery. I run critical IT infrastructure and software rollouts under high-pressure conditions and focus on Zero Trust, Cloud Security, and SASE.

Core Philosophy

Philosophy & Approach

In the domain of critical infrastructure and high-stakes operations, failure is not simply an inconvenience—it is often a catastrophic event. My approach to cybersecurity and system administration is rooted in the belief that resilience must be engineered from the ground up. Whether analyzing memory dumps for forensic anomalies or deploying agentic AI systems for predictive maintenance, I prioritize robust, deterministic architectures over superficial complexity.

My background as a Search & Rescue Operator has profoundly shaped my engineering methodology. Operating under life-critical pressure instills a rigorous discipline: systems must be intuitive, redundancies must be automatic, and fail-safes must be absolute. I carry this philosophy into my technical work, ensuring that every deployment, from Kubernetes clusters to Zero Trust network configurations, is designed to withstand both adversarial actions and environmental degradation.

Threat Vectors & Stack

Technical Competencies

5 items

Security

  • Threat Hunting
  • Memory Forensics
  • OSINT Analysis
  • Anomaly Detection
  • Network Security
6 items

AI & Data

  • Agentic AI
  • RAG
  • ETL Pipelines
  • Time-Series Analysis
  • NLP
  • Predictive Modeling
5 items

Infrastructure

  • Docker
  • Kubernetes
  • QEMU + KVM
  • Linux (Debian, Red Hat)
  • Network Administration
5 items

Tooling

  • Python
  • Shell Scripting
  • Git
  • LaTeX
  • Microsoft Office

Deployed Architectures

Selected Field Operations

OP_01 09/2024 — Present

EnerjiVeri — 100 Years of Turkish Energy Data

TUBITAK 1001 — Sole web developer for the national strategic project (No. 323K520)

Problem: A century of national energy production, consumption, and policy data sat fragmented across CSVs and PDFs, unusable for evidence-based policy analysis.

Approach: Built a dynamic Turkish-language data portal consolidating 100 years of quantitative and qualitative energy data with time-series charts, sectoral distribution models, and interactive dashboards.

Result: Live national portal used by researchers and policy stakeholders under the project "Energy Strategies in the Second Century of the Republic".

Technology Stack

  • Python
  • Data Visualization
  • Time-Series
  • Web Portal
  • ETL
OP_02 2024 — 2025

Tune2Travel — Music Videos & Destination Marketing

TUBITAK 1001 — Data infrastructure & NLP pipeline

Problem: Quantifying how music videos shape tourism perception requires large-scale, multi-language social media data plus cultural NLP processing.

Approach: Engineered the data infrastructure: YouTube API ingestion, ETL pipelines, NLP and ML models surfacing cultural and sociological signals about destination marketing on social platforms.

Result: National research project deliverable enabling marketing & sociology researchers to query patterns across thousands of cross-language music videos.

Technology Stack

  • Python
  • NLP
  • spaCy
  • Gensim
  • YouTube API
  • ETL
  • Selenium
OP_03 2025 — 2026

Unsupervised Memory Forensics Triage

Volatility3 + Isolation Forest for fileless malware

Problem: Zero-day and fileless malware evade signature-based detection and overwhelm analysts with raw memory artefacts.

Approach: Designed an automated memory forensics triage system on top of Volatility3 with unsupervised ML (Isolation Forest) over behavioural and graph-theoretic features to surface anomalous processes.

Result: Manuscript under review (Texas, USA). Co-authored with H. Coskun and R. Creutzburg.

Technology Stack

  • Volatility3
  • Memory Forensics
  • Isolation Forest
  • Graph Analysis
  • Python

Academic Telemetry

Selected Publications

2026
in preparation Manuscript in Preparation

A Bibliometric & Neurobiological Synthesis of the Brainrot Phenomenon

Özgenç, G., Biricik, M.

Quantitative bibliometric network analysis and neurobiological synthesis of algorithm-induced cognitive degradation. Gamified neurofeedback BCI therapies for executive dysfunction will be implemented before publication.

2026
Under Review Under Review (Texas, USA)

Visualizing Process Anomalies in Memory Forensics: An Unsupervised Triage System

Coskun, H., Biricik, M., Creutzburg, R.

Automated memory forensics system using Volatility3 and unsupervised ML (Isolation Forest) to detect zero-day and fileless malware via behavioural and graph-theoretic features.

2026
ready Manuscript ready for submission

Asynchronous EEG-BCI via Change Point Detection Algorithms

Biricik, M., Ballı, T., Yetkin, E. F.

Real-time signal processing pipeline using O(N) PELT algorithms reducing computational latency to 86.25 ms, enabling high-speed anomaly detection for edge computing environments.

2025
Published IEEE UPEC 2025

Customer-Level Aggregation: The Imperative for Reliable Non-Technical Loss Detection Amidst Row-Level Analysis Pitfalls

Küçük, M., Coskun, H., Biricik, M., Bülbül, B. E.

Co-developed a customer-level aggregation model for BEDAS with 136 engineered features that prevents data leakage in electricity theft detection.

Operational History

Experience & Education

MSc in Applied Cybersecurity (CyberMACS)

2026 — 2027

Erasmus Mundus Joint MSc

Awarded full EU scholarship based on academic excellence. Focus on Applied Cybersecurity, Cryptography, and Network Security across multiple European institutions.

Graduate Researcher

2025 — Present

Kadir Has University BCI-Feast

Conducting research on Brain-Computer Interface (BCI) systems, alongside delivering laboratory sessions for MIS undergraduates on algorithm design.

Undergraduate Researcher & Admin

2023 — 2025

Kadir Has University CCIP

Administered network and systems infrastructure for the Center on Cybersecurity and Critical Infrastructure Protection. Supported GPU-accelerated ML projects.

Kinetic Incident Response & Crisis Management

2025 — Present

AFAD

Conduct high-stakes urban and mountain search & rescue operations under life-critical pressure. Managing real-world life-or-death crises on the ground translates to absolute composure when resolving critical server outages or security breaches in the digital realm.

Secure Channel

Get in Touch

Open to collaboration on cybersecurity, applied AI, and edge defence.

Location

Istanbul, Turkey

Uptime: Mon-Fri: 09:00 - 18:00 (TRT)