Hi, I'm Ahmet!

I'm a cyber security engineer focused on securing large-scale cloud and critical infrastructure systems. I specialize in threat modeling, cloud-native security architecture, and automating defenses across hybrid OT/IT and Kubernetes environments, with hands-on DevSecOps experience.

Recent on my blog

Work History

2024

I worked at Enerjisa Üretim on security architecture for hybrid environments, focusing on IAM, and infrastructure hardening. I also supported OT security through pentesting, vulnerability management, and SAST/DAST integration in SSDLC processes.

2021

I worked at BtcTurk on security operations across Azure, AWS, and on-prem environments, focusing on cloud hardening, CSPM, security baseline enforcement, and DevSecOps practices. I also contributed to incident response, vulnerability management, and breach attack simulations in a Purple Team setting.

2020

I worked at Veri Security on digital forensics, assisting law enforcement with evidence analysis and investigation in cybercrime and fraud cases.

Certifications

CTIA

Feb 2023

Cyber Threat Intelligence Analysis

Verify →

AZ-500

Apr 2023

Microsoft Azure Security Engineer

Verify →

SC-100

Apr 2023

Microsoft Cyber Security Architect

Verify →

CRTO

Apr 2025

Certified Red Team Operator

Verify →

CRTL

Jun 2025

Certified Red Team Lead

Verify →

CCSE

Nov 2025

Certified Container Security Expert

Verify →

CCSP

IN PROGRESS

Certified Cloud Security Professional

Open Source Projects

2025

CSPM Tool - Open-source Cloud Security Posture Management tool for multi-cloud environments. Automated security compliance checks, real-time drift detection, and remediation playbooks for AWS and Azure infrastructures.

2024

Cloud CIS Benchmark Controller - Kubernetes operator that continuously monitors and enforces CIS benchmarks across cloud resources. Features automated remediation, Slack alerts, and compliance reporting dashboards.

2023

Kubectl Scripts Collection - Curated collection of kubectl scripts for security auditing, RBAC analysis, and rapid incident response in Kubernetes clusters. Includes automated pod security policy validation and network policy generators.

2022

Azure Pentest Automation Framework - Python-based framework automating Azure security assessments. Performs automated reconnaissance, privilege escalation checks, and generates detailed vulnerability reports with MITRE ATT&CK mapping.