Fatih Serdar Çakmak
fsc for short
SOC intern at a bank. Building security tools for AI on the side.
what i do
I work on the defensive side of security. During the day that means triaging SIEM and EDR alerts at a bank and automating the repetitive parts of SOC work with n8n. In my own time I build open-source tools for securing LLM apps and the MCP servers that agents plug into.
p.s. I’m studying Computer Engineering at ITU, graduating in 2027. Before that I did industrial automation at a technical high school, which turned out to be decent prep for OT security. Certs so far: Nokia NRS1.
work
- Fibabanka — Cyber Security Operations (SOC) Intern, part-time
- Doğuş Teknoloji — Cybersecurity and Incident Response Intern
building
- Tamga — a self-hosted proxy between your app and the LLM. Redacts PII, blocks leaked secrets, catches prompt injection.
- MCPRadar — scans MCP servers for tool poisoning and rug pulls before your agent runs them. On PyPI. live ↗
- İTÜ Ders Arşivi — every ITU course section since 2016, archived daily, because OBS only shows the current term. live ↗
- İTÜ MCP — connects ITU’s Ninova and OBS to Claude and other MCP clients. Your password stays on your machine.
also made
- SOC Simulation — 127 alerts, 126 false positives, 1 real threat. A SIEM/SOAR case study mapped to MITRE ATT&CK. live ↗
- SOC n8n Workflows — 10 SOC automation playbooks for n8n, ready to import.
writing
say hi
Email is the fastest way to reach me.
fscakmak@proton.me · github · linkedin · medium