Ertuğrul ÖZTOMSUK

Application Security Specialist & DevSecOps

Istanbul, Türkiye

About

Digital Forensic Engineer

Experience

  • Doğuş Teknoloji (Full-time · 3 yrs 1 mo)
    • Application Security Specialist
      Apr 2024 - Present · 2 yrs 3 mos

    • Jr. Cyber Security Specialist
      Jun 2023 - Mar 2024 · 10 mos

      • Managing application security and vulnerability management tools, • Source Code Analysis, • Conducting network and application vulnerability scans and collaborating with infrastructure and software teams to remediate identified vulnerabilities, • Performing vulnerability scans in CI/CD pipelines, reporting findings, and supporting remediation processes, • Contributing to the integration of cybersecurity across all stages of the CI/CD pipeline within DevSecOps practices, • Increasing employee cybersecurity awareness by designing and conducting customized phishing simulations, • Contributing to Cyber Threat Intelligence processes.

  • Cyber Security Researcher at Ministry of Interior, Turkey
    Jun 2022 - Jun 2023 · 1 yr 1 mo

    • Researching, installing, developing and testing honeypot solutions, • Examining log records on ELK SIEM and Splunk, • Installation and testing of the system by performing simulations with different attack types, • Developing code for data transfer via Syslog, • Providing cyber security awareness training to municipalities, conducting research on cyber security, solutions used in institutions (Firewall, EDR, SIEM, DDOS, Honeypot, WAF, SandBox, etc.) and reporting them to relevant institutions.