about

I am a security engineer at Trendyol, one of the largest e-commerce platforms in Turkey. My work sits where application security meets infrastructure: DevSecOps practices and security automation, cloud security design, container and Kubernetes hardening, runtime monitoring, CI/CD pipeline security, and secure coding reviews.

I studied Computer Science at Bilkent University and graduated in 2023. Most of what I know about security came after that, from breaking things in controlled settings and then figuring out how to keep them from breaking elsewhere.

Outside of work I build small tools, mostly to automate things that annoy me. I also travel, take photographs, and spend more time reading about cars than is strictly reasonable.

what I work with

• Application security and secure SDLC
• Cloud security and DevSecOps
• Kubernetes and container security
• CI/CD security and pipeline hardening
• Runtime security monitoring
• Go, Python, Java
• Burp Suite, SAST and DAST tooling

certifications

• eLearnSecurity Web Application Penetration Tester eXtreme (eWPTX)
• Certified Kubernetes Administrator (CKA)
• Google Cloud Professional Cloud Security Engineer
• Kubernetes and Cloud Native Associate (KCNA)
• ISC2 Certified in Cybersecurity (CC)