Ahmet Goker
Threat Intelligence & OSINT Analyst
Vlaardingen, NetherlandsDutch national, full EU work authorisation
[email protected]linkedin.com/in/ahmetgokergithub.com/0xCD4csintresearch.org
Profile
OSINT and threat intelligence analyst with four years of hands on security experience across open source investigation, threat research, security operations and mobile application security. Founder of CSINT, an open source OSINT and threat intelligence knowledge base built around a documented collection, verification and OPSEC methodology. Focused on turning fragmented public data into validated, decision ready intelligence and on keeping verified fact clearly separated from analytical inference. Comfortable across the full cycle, from collection design and automation through enrichment, correlation and written reporting.
Core Skills
OSINT & Threat Intelligence collection planning, query design, source validation, metadata analysis, infrastructure pivoting, network and domain analysis, CVE verification, OPSEC, sock puppet management, automated collection with n8n, intelligence reporting.
Security Operations Elastic Stack, Kibana, log analysis, SIEM monitoring, vulnerability scanning, incident context and triage.
Engineering & Tooling Python, Bash, Linux, Nmap, Burp Suite, Wireshark, MobSF, Frida, DynamoRIO.
Frameworks MITRE ATT&CK, OWASP MASVS, NIS2, NIST CSF, ISO 27001.
Experience
Founder & OSINT Researcher
- Built and maintain an open source OSINT and threat intelligence knowledge base covering 200+ curated sources, 34 categories and 22 operational investigation workflows.
- Developed and documented a research methodology spanning source selection, query design, verification, OPSEC, ethics and legal boundaries, now used as a reference by other analysts.
- Apply a pivot and validate analytical model that separates verified fact from inference and tracks recurring patterns across collection cycles.
- Developed a Python based Telegram assistant delivering tasking, weekly source releases and investigation checklists to the research community.
- Published technical research on intelligence platform architecture and on AI fingerprinting in OSINT tooling.
Cyber Security Specialist
- Collected and analysed open source information to translate online threat activity into actionable security guidance for internal and client facing use.
- Automated collection, enrichment and validation pipelines using n8n and OSINTDog, significantly reducing manual research time per investigation.
- Produced threat context to support detection and response, working with Elastic Stack for SIEM monitoring and log analysis.
- Designed and built CTF labs, malware analysis environments and blue and red team exercise scenarios.
- Supported penetration tests and vulnerability assessments across web and network targets.
Cybersecurity Instructor
- Develop and deliver technical course material on network security, penetration testing and defensive fundamentals.
- Translate complex security topics into structured, practical material for mixed experience audiences.
Mobile Security Researcher
- Performed security research and penetration testing on Android and iOS applications against the OWASP MASVS standard.
- Conducted static and dynamic analysis of application behaviour, API traffic and permission models using MobSF and Frida.
Threat Cases Operator
- Monitored and analysed logs in Kibana for threat detection across critical environments.
Malware Analyst Intern
- Carried out binary analysis, fuzzing and vulnerability research on malware samples.
Education
BSc Computer Engineering
- Nuffic credential evaluation, 2026. Equivalent to a Dutch WO bachelor's degree in computer science.
- Thesis on DynamoRIO based dynamic binary instrumentation for Linux malware analysis.
Certifications
GIAC Open Source Intelligence, GOSI exam scheduled 1 October 2026.
eMAPT eLearnSecurity Mobile Application Penetration Tester.
Additional CNPEN Certified Network Pentester, CBTEAMER Certified Blue Teamer, CBFRPRO Binary Fuzzing & Reversing.
Languages
DutchEnglishTurkish
Additional
Active CTF player on Hack The Box and TryHackMe. Maintainer of csintresearch.org and open source tooling on github.com/0xCD4.