24/7 ONLINE · 09:00–00:00◆Hacettepe Teknokent / Ankara
+90 536 662 38 09[email protected]
DSETDoğanay Siber Emniyet
  • Services
  • Academy
  • Simulator
  • Blog
    BlogArticles · technical write-ups · guidesAnnouncementsLatest DSET news · bulletinsVideo GalleryTraining · demos · cyber security videos
  • About Us
    About UsThe DSET story · vision · teamSimulators and ToolsFree interactive calculators, simulators and diagnosis wizardsSector SolutionsFinance · Healthcare · Public Sector · E-Commerce · 7 industriesReference CasesReal DSET cases · industry outcomesIn the PressDSET in the national pressSite SearchAll content · articles · services · casesFrequently Asked QuestionsCommon questions · quick answersContactPhone · WhatsApp · address · form
  • Tracking System
    Customer LoginAccount dashboard · request trackingForensics RequestDigital evidence · examination requestData Recovery RequestDisk · RAID · recovery requestPrice CalculatorATK 2026 reference · 9 services
KAOS
TREN
DSETCustomer Panel

Sign in to your account

Request tracking, quote approval and your history in one panel.

Loading security verification...
DSET Customer Panel AES 256 GCM encrypted session
DSET AI

Career Compass

Which position · via which path · in how many years?

Cyber security positions · the program chain from SOC L1 to CISO · a skill matrix · the Turkish market salary range. When you should take which exam · what each certification is good for.

⬢Which position fits you?15-question matching test · 5 minutes · top 3 recommendations→
22 positions
Junior

SOC Analist · L1

Alarmın ilk kapısı · 7/24 nöbet

Güvenlik Operasyon Merkezi'nin ilk savunma hattı. SIEM alarmlarını triajlar, false positive'leri eler, gerçek tehdidi L2'ye eskale eder. Vardiya bazlı çalışır, hızlı karar verir.

Timeline · 1 years

Now1yStartGoal
DSET-SOC
SOC Analyst · Tier 1 + Tier 2

Geographic distribution · TR market

Istanbul52%Ankara18%Izmir9%Anatolia12%Remote7%Abroad2%
Total 100% · early-2026 market observation

Skill network · 8 critical skills

DSETPosition
Splunk SPL
Uncommon · D3 · AI3
Elastic / KQL
Common · D3 · AI3
Sysmon advanced config
Uncommon · D3 · AI4
Wireshark · pcap analiz
Common · D2 · AI3
Linux + Windows komut satırı
Common · D1 · AI2
MITRE ATT&CK navigator
Common · D2 · AI4
Türkçe teknik rapor yazımı
Common · D2 · AI3
SIEM alarm triajı
Common · D2 · AI2
  • Detection & Hunting×5
  • Networking×2
  • Communication & Leadership×1

Node color = category · ring thickness = AI resilience · fill opacity = rarity in the TR market. Lines show prerequisite / complementary relationships between skills.

A day in the life · 8 hours

Shift-based · 24/7

8-hour shift · nights included. Glued to the SIEM screen · 100+ alerts/day on average.

00:0006:0012:0018:008hdaily
Click / hover over a slice
  • 08-09Shift handover · night notes● Moderate
  • 09-12Alert triage · first pass● High
  • 12-13Break · briefing● Light
  • 13-16Deep dive on complex alerts · escalation to L2● Critical
  • 16-17Case documentation · handover prep● Moderate

Workload profile · stress · autonomy · learning

Stress · 4Predictability · 3Autonomy · 2Learning curve · 4External stakeholders · 2On-call burden · 5
Typical duration2 years
Burnout riskHigh
Typical next path
  • SOC L2
  • IR Analyst
  • CTI

All 6 axes are on a 1-5 scale. High stress combined with high on-call is a burnout signal; if autonomy and learning curve are high, this position is a career springboard.

Interview preparation + portfolio requirements

  • GitHubmin 1 public repos
  • LabTryHackMe SOC Level 1 path completed
  • Certificationmin 1 external certifications
Technical questions · 7▾
  1. Explain a Sigma rule — read this example and interpret it.
  2. What is the relationship between Sysmon Event ID 1 (Process Create) and Event ID 8 (CreateRemoteThread)?
  3. What does a 4624 Logon Type 3 mean within a Windows Event Log?
  4. What is MITRE ATT&CK T1059, and what kind of sub-techniques does it have?
  5. Identify a TCP three-way handshake in Wireshark.
  6. How do you weigh the cost difference between a false positive and a false negative?
  7. How do you analyze a phishing email — list the header- and body-based steps.
Behavioral questions · 3▾
  1. A critical alert came in during the night shift and you couldn't reach L2. Describe what you did.
  2. 5 alerts opened at the same time — which one would you start with?
  3. An important piece of information was missed during the shift handover — how did you respond to its consequences?
System design · 1▾
  1. Design a SOC L1 shift plan from scratch · 3 teams · 24/7 coverage.

Certification ROI · cost · study · payback

  • CompTIA Security+
    +12% salary

    SOC entry ticket · global recognition

    Cost
    $392 · 13K TL
    Study
    80 hours
    Validity
    3 years
    Monthly impact
    +7K TL
    Annual impact
    +86K TL
    Payback
    2 months
  • Splunk Power User
    +8% salary

    Entry into the Splunk ecosystem

    Cost
    $150 · 5K TL
    Study
    40 hours
    Validity
    Lifetime
    Monthly impact
    +5K TL
    Annual impact
    +58K TL
    Payback
    1 months
  • TryHackMe SOC L1
    +5% salary

    Practice-focused · makes a difference on your CV

    Cost
    $120 · 4K TL
    Study
    60 hours
    Validity
    Lifetime
    Monthly impact
    +3K TL
    Annual impact
    +36K TL
    Payback
    1 months

This calculation is an estimate only. Multiplier values are based on early-2026 TR market observations · actual increases vary with employer · English proficiency · additional skills.

Regulatory touchpoints · regulation intensity

  • KVKKMedium
  • ISO 27001Medium
  • ISO 27701None
  • PCI-DSSNone
  • BDDKLow
  • MASAKNone
  • SPKNone
  • NIS2None
  • DORANone
  • IEC 62443None

High = daily work is directly affected by this regulation · Medium = touched frequently · Low = tracked at an awareness level. Criticality shifts by sector.

AI resilience · 2030 projection

Automation risk0100HighMediumLowAugmentationSafeFast-trackShrinkingAt riskYou are here
Automation risk72%
AI augmentationHigh

Alert triage is the SOC task carrying the highest automation risk. The AI-augmented L1 has just been born · the classic L1 will shrink.

Critical AI skills for preparation
  • AI-augmented triage (Copilot Sentinel)
  • LLM-driven IOC query generation
  • AI-assisted playbooks

Salary ROI · 5-year projection

+0y65K TL+1y+2y+3y+4y+5y114K TL65K114K
Estimated 5-year total gross income6295K TLMonthly gross × 12 months × average of 6 year points

Readiness · gap analysis

0%ready
Programs0/1
Exams0/1
Certifications0/2
Skills0/8
Next most critical stepComplete DSET program: SOC Analyst · Tier 1 + Tier 2
DSET program chain
Bloom exams
External certifications
Critical skills

Selections are stored only in this browser (localStorage) · nothing is saved on the server. Each position uses a separate record.

Role description

  • SIEM alarm triajı · 8 saatlik vardiyada 100+ alarm
  • Playbook'a göre ilk müdahale · containment kararı
  • Threat intel ile zenginleştirme · IOC bakma
  • L2'ye eskalasyon · vaka kapanışı dokümantasyonu

Critical skills · 6

  • SIEM (Splunk · Elastic)
  • Sysmon log analizi
  • Wireshark temel
  • Linux+Windows komut satırı
  • MITRE ATT&CK okuyabilme
  • Türkçe rapor yazımı

DSET program chain

1SOC Analyst · Tier 1 + Tier 2DSET-SOC

Recommended Bloom assessments

mitre threat hunting →

Monthly gross salary · by company type · TR 2026

  • Startup1-50 people
    38K–64K TL
  • SME51-500 people
    43K–71K TL
  • HoldingTR · 500+ people
    52K–86K TL
  • Public sectorGovernment institution
    40K–66K TL
  • Foreign/RemoteUSD/EUR pay
    61K–101K TL

The foreign company band reflects USD/EUR pay + remote · English C1+ · early-2026 market observation. The English C1+ band yields roughly a ×1.18 multiplier · additional languages ×1.08.

Industry certification references

  • CompTIA Security+
  • Splunk Power User

Lateral move options · transfer score

  • SOC Analist · L2 / Senior23% ready
    Mid3 years typical90K–145K TL
  • IR Lideri · Olay Müdahale0% ready
    Senior4 years typical170K–290K TL
  • Cloud Güvenlik Mühendisi0% ready
    Mid2 years typical110K–210K TL

Transfer score = shared skills (intersection) ÷ all skills (union) × 100. You can close skill gaps with DSET programs and Bloom exams.

DSETDoğanay Siber Emniyet

Digital Forensics · Data Recovery · Cyber Security · Information Security · Technical Examination · Expert Opinion · KVKK & GDPR Compliance · Digital Transformation Consulting · advanced training programs offered by DSET Academy.

+90 536 662 38 09[email protected]Hacettepe Teknokent · Üniversiteler Mah. 1596. Cad. 6. AR-GE Blokları C Blok No:6C Z.Kat · Beytepe · Çankaya · ANKARAOur Google Business Profile7/24 Online · 09.00 → 00.00 · Pazartesi · Pazar

Our Services

  • Adli Bilişim
  • Veri Kurtarma
  • KAOS Yerel Yapay Zekâ
  • Siber Güvenlik
  • KVKK-GDPR Danışmanlık
  • DSET Akademi
  • Olay Simülatörü & Tehdit Heatmap
  • Web Sitesi Güvenliği
  • Bilgi Güvenliği
  • Adli Bilişim Benchmark'ı

Support & Help

  • About Us
  • Press Room
  • Price Calculator
  • Frequently Asked Questions
  • Contact
  • EU AI Act Article 4 Guide
  • Sector Solutions
  • KVKK Disclosure Statement
  • GDPR · EU Data Rights
  • Privacy Policy
  • Cookie Policy
  • Terms of Service

Quick Links

  • Solutions
  • DFB Benchmark
  • Blog
  • Video Gallery
  • DSET Academy
  • Case Simulator
  • Reference Cases
  • Site Search
  • DSET AI Assistant
  • Digital Forensics Request Form
  • Data Recovery Request Form
  • Customer Login

Ecosystem

  • Hacettepe Teknokent
  • Cyber Security Cluster
  • USOM · National Cyber Incident Response
  • KVKK Authority
  • llms.txt
© 2026 dset.com.tr · Doğanay Siber Emniyet Teknolojileri · All rights reserved.
“Kalite asla tesadüf değildir...”
TREN
Privacy
KVKK
GDPR
Cookies
Terms