Experience

• 

  Qatar technical services

  Jul 2014 - Aug 2014

  Intern

  network system analyst

• 

  Kuveyt türk katılım bankası

  Jun 2016 - Mar 2017

  Quality assurance engineer

  • Responsible IT Quality Assurance (QA) control activities such as System Development Life Cycle(SDLC) QA Controls audit and controller• Keeping IT Risk up to date– Control Matrixes and Workflows are based on IT audits• Keeping up to date IT Policies and Procedures.• Work with internal and external (independent audit firms such as Deloitte) IT auditors on the time of COBIT audits and BDDK audits such as Application Controls and Information Systems Principles Statement (Ilkeler Tebligi) Show less

• 

  Tübi̇tak bi̇lgem

  Mar 2017 - Aug 2018

  Cyber security analyst

  Data Loss Prevention Policy Configuration Risk management processesLeading Data Classification ProjectProtection of personal data committee member at TÜBİTAK (KVKK)(GDPR)

• 

  Vakıf katılım

  Aug 2018 - Jul 2022

  • Static and Dynamic application security testing(SAST&DAST)• Vulnerability management• Management of Social Engineering Tests• Management of Security Releases• Management of Penetration Tests• Information security review for IT projects• Performing PoC Tests for Requirement of IT Security Projects • Static and Dynamic application security testing(SAST&DAST)• Information security review for IT projects• Integrate security operations within the SDLC• Follow-up of the BDDK Pentest Results• Vulnerability management• Data Loss Prevention Policy Configuration• Coordinator of hsm processes• Risk management processes• Leading Data Classification Project

  • Senior Cyber Security Engineer

    Apr 2021 - Jul 2022

  • Cyber Security Engineer

    Aug 2018 - Jul 2022
• 

  Merkezi kayıt kuruluşu a.ş. (mkk)

  Jun 2022 - Apr 2024

  Senior information security specialist

  •Assisting in the planning and coordination of the vulnerability scans, penetration tests, and follow-up•Technical risk assessment of identified security vulnerabilities•Working with the team on determining the methods & techniques related to the works followed and establishing the procedures & processes•Design and implement security concepts, policies and standards (based on the ISO/IEC 27001)•Implementing security tools: DLP, Vulnerability Management, Patching Management, Data Classification•Perform monitoring and review of security events•With internal trainings I strengthen the awareness of colleagues regarding information security•Leading Cyber Security projects in cooperation with local and central departments Show less

• 

  Kuveyt türk katılım bankası

  Apr 2024 - now

  Senior cyber security engineer